#CobaltStrike 4.8 is out -
“System Calls Support
This release sees the addition of support for direct and indirect #SystemCalls. We have added support for a number of system calls, specifically:
CloseHandle
CreateFileMapping
CreateRemoteThread
CreateThread
GetThreadContext
MapViewOfFile
OpenProcess
OpenThread
ResumeThread
SetThreadContext
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery”
https://www.cobaltstrike.com/blog/cobalt-strike-4-8-system-call-me-maybe/
#BlueTeam #ThreatIntel #ThreatIntelligence #Infosec #Cyber #RedTeam #CyberSecurity #InformationSecurity
#cobaltstrike #systemcalls #blueteam #threatintel #threatintelligence #infosec #cyber #redteam #cybersecurity #informationsecurity
Trace Syscall Activity In Linux With Process Monitor (Procmon) #SystemCalls #Syscall #ProcessMonitor #Promon #SysinternalsSuite #Microsoft #Linux
https://ostechnix.com/trace-syscall-activity-in-linux-with-process-monitor-procmon/
#Linux #Microsoft #SysinternalsSuite #Promon #processmonitor #syscall #systemcalls