Traffic to PIVOTPIPE/Cobalt Strike infrastructure 45.32.253.166
Detects outbound network traffic from internal hosts to known PIVOTPIPE-associated infrastructure, including attempts to access open directories for payload distribution and suspected Cobalt Strike command-and-control communications.
Suricata
