Leveraging Microsoft Teams to persist and cover up Cobalt Strike traffic
Combining DLL hijacking with Cobalt Strike Malleable C2 profiles to persist and stay stealthy
EDR
Hindering Threat Hunting, a tale of evasion in a restricted environment
Use of Google Apps Script as a proxy for communication with the C&C