Beacon
A synthetic mobile application from Meridian Labs used to demonstrate cross-session handoff scenarios.
Timeline (last 90 days)
Beacon, the core component of Cobalt Strike, is a customizable payload that supports multiple communication methods including HTTP, HTTPS, and DNS to maintain a connection with the C2 server.
Beacon can perform operations on target hosts such as command execution, file transfer, screen capture, and credential harvesting.
Detecting Beacon requires behavioral analysis, memory scanning, and deep integration with EDR products, rather than relying solely on traffic signature matching.
All Facts (3)
Beacon, the core component of Cobalt Strike, is a customizable payload that supports multiple communication methods including HTTP, HTTPS, and DNS to maintain a connection with the C2 server.
50%UnverifiedBeacon can perform operations on target hosts such as command execution, file transfer, screen capture, and credential harvesting.
50%UnverifiedDetecting Beacon requires behavioral analysis, memory scanning, and deep integration with EDR products, rather than relying solely on traffic signature matching.
50%