All Detections

Suspicious Cobalt Strike DNS Beaconing - Sysmon

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025018

Detects a program that invoked suspicious DNS queries known from Cobalt Strike beacons

Sigma