Agent Skills: hunting-for-cobalt-strike-beacons

Detect Cobalt Strike beacon network activity using default TLS certificate signatures (serial 8BB00EE), JA3/JA3S/JARM fingerprints, HTTP C2 profile pattern matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.

UncategorizedID: autohandai/community-skills/hunting-for-cobalt-strike-beacons

Author

autohandai

https://github.com/autohandai View all skills

Repository

autohandai/community-skills

autohandaiLicense: Apache-2.0

103

Install this agent skill to your local

pnpm dlx add-skill https://github.com/autohandai/community-skills/hunting-for-cobalt-strike-beacons

Skill Files

Browse the full folder contents for hunting-for-cobalt-strike-beacons.

Download Skill

Loading file tree…

Select a file to preview its contents.