Sniper

A simple proof of concept for detecting use of Cobalt Strike's execute-assembly

Tool for associated blog post at https://www.mdsec.co.uk/blog