← Back to Library
Member article PentestMag Library

ETW vs Sysmon Against C2 Servers

Bruno Zwierz

February 21, 2023 · 10 min read

In this article, I want to talk about my research about ETW and Sysmon and how I can use these events for detection against C2 servers like Cobalt Strike, PoshC2, Sliver and, as always, Metasploit.

So, as a pentester and security researcher, I tried to work on the Blue-Team side (defensive approach) with my own offensive experience, etc.

Continue reading

The rest of this story is for members

Get the complete article and the rest of the PentestMag Library with an active membership.