Detects use of Cobalt Strike commands accidentally entered in the CMD shell
Read the full analysis on IntelFusions