Strike Request |verified| | Cobalt

Leila’s team had a choice. Pull the plug and lose the trail, or feed the Beacon misinformation.

Beacon Activity (Suspicious) Source IP: 10.12.45.18 – an internal dev server, the Jenkins build box. Destination: 185.130.5.253:443 (Bulgaria) Signature: Potential Cobalt Strike staging request. cobalt strike request

She clicked it.