hard20 pts · first answer countsnetwork-securitythreat-huntingtls
Pivoting on a C2 certificate
One confirmed C2 server uses a self-signed certificate with an unusual subject. How can network logs find more of the attacker's servers?
Discussion 0
Join free to post in the discussion.
Related questions
- IDS vs IPSCybersecurity Analyst
- What makes a firewall stateful?Cybersecurity Analyst
- Threat hunting versus alertingCybersecurity Analyst
- Many discovery commands in a minuteCybersecurity Analyst
- Why build a baseline firstCybersecurity Analyst
- The hidden last rule of a firewallCybersecurity Analyst
- Default port for SSHCybersecurity Analyst
- RDP open to the internetCybersecurity Analyst