Muddled Libra Rogue VM Tooling Execution And Staging

Daniel Jeremiah@daniyyell

•updated Feb 28, 2026•0•26

Detects execution of tools and artefacts reported in Unit 42 Muddled Libra operational playbook, including Chisel tunnelling, PsExec, ADExplorer, S3 Browser, and goon.zip staging.