Attack Tool(s): Sliver, Havok, Mythic
- Sliver: https://github.com/BishopFox/sliver
- Havok: https://github.com/HavocFramework/Havoc
- Mythic: https://github.com/its-a-feature/Mythic
Detection Link(s):
- Network Threat Hunting
- Firewall Log Analysis
- Security Information and Event Management (SIEM) Log Analysis
Helpful Blogs (BHIS):
- “Bypass Web Proxy Filtering” – https://www.blackhillsinfosec.com/bypass-web-proxy-filtering – Domain fronting techniques.
