GraphStrike – Empowering Cobalt Strike With Microsoft Graph API Integration

GraphStrike is a suite of tools that enables Cobalt Strike’s HTTPS Beacon to use Microsoft Graph API for C2 communications. All Beacon traffic will be transmitted via two files created in the attacker’s SharePoint site, and all communications from Beacon will route Why? Threat intelligence has been released regarding several different APTs leveraging Microsoft Graph API and …