intelligence_src_6df1fb5096a2991dbd
- Source-provided label
- Publisher RSS metadata
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Oct 13, 2026 14:26 UTC
- Retrieved
- Oct 14, 2026 05:56 UTC
Releasing the Cobalt Strike Beacon Corpus
Authors: Yun Zheng Hu Introduction Today Fox-IT is publicly releasing its full Cobalt Strike Beacon Corpus, containing 56,843 raw beacons and their parsed configurations, from 190,182 sightings collected from 30,604 unique IP addresses running a Team Server (the Cobalt Strike command-and-control server that beacons connect back to) between 4 July 2018 and 29 September 2026, … Continue reading Releasing the Cobalt Strike Beacon Corpus →
Reference details
- Source category
- research-report
- First reported
- Oct 13, 2026 14:26 UTC
- Last reported
- Oct 13, 2026 14:26 UTC
- Catalog updated
- Oct 14, 2026 05:56 UTC
- Record ID
9829077c7ab2b1e2c0e2b5309a8a37812eeea79bde2ed2cecc3ed397198b27b0
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Review source update dates and status
- intelligence_src_6df1fb5096a2991dbdRecent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.