TOPIC LIBRARY
Threat Hunting & Adversary Behavior
Reference topics covering adversary infrastructure, command and control frameworks, tooling, and behavior used in threat investigations.
What Is a Command and Control (C2) Framework?
In cybersecurity, a Command and Control (C2) framework is the system attackers use to communicate with and control compromised devices inside a victim’s environment. Once an attacker gains access, they need a reliable way to issue commands, move laterally, steal data, or install additional tools. The C2 infrastructure provides that.
Read Topic →What Is Cobalt Strike?
Cobalt Strike is one of the most well-known Command and Control (C2) frameworks in cybersecurity. Originally developed as a legitimate red-team tool, it provides security professionals with a powerful platform to simulate advanced attacks, test defenses, and measure how organizations respond under real-world conditions. However, its wide adoption has also.
Read Topic →What Is Mythic?
Mythic is a modern, open-source Command and Control (C2) framework widely used by security professionals and, unfortunately, by adversaries as well. Designed to be modular, flexible, and highly customizable, Mythic provides a powerful platform for controlling compromised systems during red-team exercises and penetration tests.
Read Topic →What Is Sliver?
Sliver is a modern, open-source Command and Control (C2) framework developed by the security company Bishop Fox. Originally built as a legitimate tool for penetration testers and red teams, Sliver has gained popularity for its flexibility, scalability, and ease of use. Unfortunately, like many C2 frameworks, it has also been.
Read Topic →