Important Detection 2026 – Cobalt Strike Named Pipe & Beacon-like HTTPS Patterns
Detects suspicious activity associated with Cobalt Strike Beacon communication, specifically monitoring for known default named pipes and specific user-agent strings commonly used by Cobalt Strike in HTTP/S traffic.
Cortex XDR
