In-memory Evasion (3 of 4) - Evasion
In-memory Evasion is a four-part mini course on the cat and mouse game related to memory detections. This lecture then gets into the meat: options to configure how Cobalt Strike's Beacon payload lives in memory are explained and demonstrated. This lecture also shows how to conduct an OPSEC review of your configuration prior to action on a target. Finally, this lecture concludes with a discussion on process context and how it influences the amount of suspect actions/indicators an automated solution will allow.