HUNTING MALICIOUS INFRASTRUCTURE - HEADERS AND STATIC STRINGS

Summary from the TLDR InfoSec newsletter

This post breaks down a process for hunting malicious open-source infrastructure by identifying hardcoded headers or static strings that are included in the application. It includes two worked examples using Responder and Havoc C2. This is part of a series of posts on techniques to hunt malicious infrastructure.