A metadata-only, random-forest detector for Cobalt Strike C2 traffic that selects a specialized model when the mimicked domain is known.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Striking Back At Cobalt: Using Network Traffic Metadata To Detect Cobalt Strike Masquerading Command and Control Channels
A metadata-only, random-forest detector for Cobalt Strike C2 traffic that selects a specialized model when the mimicked domain is known.