cd .. (Geri Dön)
siem-kutuphanesi/detection-use-cases/detection-use-cases-c2-frameworks.md

C2 Çerçeveleri

Kobalt Saldırısı

Kobalt Saldırısı

Fidye yazılımı ekipleri arasında çok popüler olduğundan odaklanmaya değer.

https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/ →

https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/

https://thedfirreport.com/2022/01/24/cobalt-strike-a-defenders-guide-part-2/ →

https://thedfirreport.com/2022/01/24/cobalt-strike-a-defenders-guide-part-2/

https://www.f-secure.com/en/articles →

https://www.f-secure.com/en/articles

https://www.unh4ck.com/detection-engineering-and-threat-hunting/lateral-movement/detecting-conti-cobaltstrike-lateral-movement-techniques-part-1 →

https://www.unh4ck.com/detection-engineering-and-threat-hunting/lateral-movement/detecting-conti-cobaltstrike-lateral-movement-techniques-part-1

https://www.unh4ck.com/detection-engineering-and-threat-hunting/lateral-movement/detecting-conti-cobaltstrike-lateral-movement-techniques-part-2 →

https://www.unh4ck.com/detection-engineering-and-threat-hunting/lateral-movement/detecting-conti-cobaltstrike-lateral-movement-techniques-part-2

https://www.recordedfuture.com/ →

https://www.recordedfuture.com/

İşaretler

https://www.blackberry.com/us/en/pdfviewer?file=/content/dam/blackberry-com/asset/enterprise/pdf/direct/bb-ebook-finding-beacons-in-the-dark.pdf → YAYINDAN KALDIRILDI

https://www.blackberry.com/us/en/pdfviewer?file=/content/dam/blackberry-com/asset/enterprise/pdf/direct/bb-ebook-finding-beacons-in-the-dark.pdf YAYINDAN KALDIRILDI

https://www.nccgroup.com/research/ →

https://www.nccgroup.com/research/

https://github.com/fox-it/cobaltstrike-beacon-data →

https://github.com/fox-it/cobaltstrike-beacon-data

Nettitude'un Şık C2'si

https://www.lrqa.com/en/cyber-labs/detecting-poshc2-indicators-of-compromise/ →

https://www.lrqa.com/en/cyber-labs/detecting-poshc2-indicators-of-compromise/

F-Secure'un C3'ü

https://www.f-secure.com/en/articles →

https://www.f-secure.com/en/articles

🛡️ INTEGRATION.md

ACKLOG SIEM İle Tam Entegrasyon

Bu dokümantasyonda listelenen log kaynakları, kurallar, korelasyon mantıkları ve tespit senaryoları ACKLOG SIEM ürün ailesi tarafından yerleşik olarak desteklenmektedir. ACKLOG, teknolojisi ve otomasyon modülleri ile tespit süreçlerinizi saniyeler içinde devreye almanızı sağlar.