DEMYSTIFYING COBALT STRIKE’S “MAKE_TOKEN” COMMAND

Summary from the TLDR InfoSec newsletter

This article explains the inner workings of Cobalt Strike's "make_token" command, which allows users to impersonate other users through their credentials with the goal of enumerating or moving laterally to remote systems.