Skip to content

And more Boss #4

Open
Open
And more Boss#4

Description

@JohnRyk
JohnRyk
opened on Sep 24, 2024

The rule Cobaltstrike_C2_Encoded_XOR_Config_Indicator
2E2F2E2F2E2C31262E2C2E2F2E2C2EB62E2D2E2C2E2A2E2E093E2E2A2E2C2E2A2E3B7B752E2B2E2F2E2C2E3A

Im just bypass this in a very simple way by disorganize the code , and want to see if there has a better explain.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions