Cobalt Strike is a pen-testing tool that often ends up in the hands of cybercriminals. It was originally created for network defenders to train them to understand vulnerabilities and possible avenues of infection by cyber criminals. Cobalt strike is a collection of threat emulation tools provided by HelpSystems to work in conjunction with the Metasploit Framework. The tools are meant to simulate intrusions by motivated actors, and they have proven to be very good at this. As a follow-up to these more manual types of attacks, we have seen targeted attacks by both state-sponsored threat actors and ransomware peddlers.”]