All Detections

Cobalt Strike Lateral Movement

Azure Sentinel@AzureSentinel
updated Jun 17, 20251054

Microsoft has observed Bazacall using Cobalt Strike in order to move laterally to other machines on the network.

Microsoft Sentinel (KQL)