The DFIR Report on Twitter: "Cobalt Strike, a Defender's Guide - Part 2 ➡️In this report we talk about domain fronting, SOCKS proxy, C2 traffic, Sigma rules, JARM, JA3/S, RITA & more. Big shout-out to @Kostastsale for helping put this together! https://t.co/QoamWA67ve https://t.co/umcJFzAGcU" / Twitter