Windows Default Cobalt Strike PowerShell Beacon — Detection Rule

Detects default function and variable names known to be used by the Cobalt Strike PowerShell beacon. This beacon is used to gain command and control on a victim.

Read the full analysis on IntelFusions