Back to sentinel-one/cobaltstrikeparser
Open-source alternatives to CobaltStrikeParser
13 open-source projects similar to sentinel-one/cobaltstrikeparser, ranked by how many features they have in common. Compare stars, activity and what each one does to find the best CobaltStrikeParser alternative.
- 3lp4tr0n/beaconhunter
3lp4tr0n/BeaconHunter
Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
C# - apr4h/cobaltstrikescan
Apr4h/CobaltStrikeScan
Scan files or process memory for CobaltStrike beacons and parse their configuration
C# - ccob/beaconeye
CCob/BeaconEye
BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity.
C# - cedowens/c2-jarm
cedowens/C2-JARM
A list of JARM hashes for different ssl implementations used by some C2 tools. Also adding other useful red team tools that use ssl (ex: EvilGinx2). Though I work on the red team side, I thought this would be a good thing to gather both to help blue teams who have the appropriate visibility with…
- fox-it/cobaltstrike-beacon-data
fox-it/cobaltstrike-beacon-data
https://research.nccgroup.com/2022/03/25/mining-data-from-cobalt-strike-beacons/
Jupyter Notebook
