CobaltStrikeScan
Like
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
Cost / License
- Free
- Open Source
Platforms
- Windows
Features
No features, maybe you want to suggest one?
CobaltStrikeScan News & Activities
Highlights All activities
Recent activities
No activities found.
CobaltStrikeScan information
Developed by
Apr4hLicensing
Open Source (MIT) and Free product.Written in
Alternatives
1 alternatives listedSupported Languages
- English
No comments or reviews, maybe you want to be first?
Post comment/reviewWhat is CobaltStrikeScan?
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
CobaltStrikeScan scans Windows process memory for evidence of DLL injection (classic or reflective injection) and/or performs a YARA scan on the target process' memory for Cobalt Strike v3 and v4 beacon signatures.
Alternatively, CobaltStrikeScan can perform the same YARA scan on a file supplied by absolute or relative path as a command-line argument.
If a Cobalt Strike beacon is detected in the file or process, the beacon's configuration will be parsed and displayed to the console.