Cobalt Strike

Description

Cobalt Strike is a commercial adversary simulation platform used by red teams to execute targeted attacks and emulate advanced persistent threats. It features Beacon, a covert agent supporting DNS, HTTP, HTTPS, and SMB communication channels with malleable C2 profiles, and provides tools for spear phishing, post-exploitation, lateral movement, and data exfiltration.

Use Cases

• Red team adversary simulation engagements
• Covert command and control channel operations
• Advanced post-exploitation and lateral movement

Attack Phases

MITRE ATT&CK Techniques (4)