Threat Analysis: Active C2 Discovery Using Protocol Emulation Part3 (ShadowPad) - VMware Security Blog - VMware

https://blogs.vmware.com/security/2022/10/threat-analysis-active-c2-discovery-using-protocol-emulation-part3-shadowpad.html