Member article
PentestMag Library
ETW vs Sysmon Against C2 Servers
Bruno Zwierz
February 21, 2023 · 10 min read
In this article, I want to talk about my research about ETW and Sysmon and how I can use these events for detection against C2 servers like Cobalt Strike, PoshC2, Sliver and, as always, Metasploit.
So, as a pentester and security researcher, I tried to work on the Blue-Team side (defensive approach) with my own offensive experience, etc.
Continue reading
The rest of this story is for members
Get the complete article and the rest of the PentestMag Library with an active membership.