Cobalt Strike EDR Evasion Detection
Detects EDR evasion techniques used by Cobalt Strike loaders, such as AMSI and ETW patching, and direct syscall patterns, aiming to evade security detections.
YARA
Detects EDR evasion techniques used by Cobalt Strike loaders, such as AMSI and ETW patching, and direct syscall patterns, aiming to evade security detections.
Already have an account?