Article: Update: 1768.py Version 0.0.20 - published 12 months ago. Content: This update to 1768.py, my Cobalt Strike beacon analysis tool, adds “runtime configuration” extraction. Although 1768.py could already search for beacon configurations inside process memory dumps, the dump was just processed as a raw file. With this update, 1768.py will also search for the runtime configuration inside a process memory dump. The runtim... https://blog.didierstevens.com/2023/11/25/update-1768-py-version-0-0-20/ Published: 2023 11 25 10:09:58 Received: 2023 11 25 10:19:54 Feed: Didier Stevens Source: Didier Stevens Category: Cyber Security Topic: Cyber Security |
Click to Open Code Editor