Follow along as Sekoia Senior Threat Intelligence Analyst Marc Nebout demonstrates how he tracks attacker infrastructure and proactively detects malicious activities. As a leader of Sekoia’s Threat Detection and Research Team, Marc is responsible for examining activities from a strategic and technical perspective, providing reliable metrics to Sekoia’s CTI team, and developing tools and methodologies that can be used to discover new threats and monitor existing ones.

As part of this work, Marc and his team are often looking for evidence of Command and Control infrastructure. In this webinar, Marc describes how his team identified credible evidence of the Cobalt Strike Malleable C2 infrastructure and provides a step-by-step tutorial that begins with searching for jQuery and self-signed certificate information in Censys Search. Watch as Marc shows how he refines results and pivots within the tool, and shares the queries he uses along the way.