What is the minimum configuration to stop a Cobalt Strike Malleable C2 attack inline and in real time?

Question

Options

• ANext-Generation CASB on PAN-OS 10.1
• BAdvanced Threat Prevention and PAN-OS 10.2
• CThreat Prevention and Advanced WildFire with PAN-OS 10.0
• DDNS Security, Threat Prevention, and Advanced WildFire with PAN-OS 9.x

• A
  3% (1)
• B
  77% (24)
• C
  6% (2)
• D
  13% (4)

Explanation

Cobalt Strike is a popular post-exploitation framework often used by attackers for Command and Control (C2) operations. Malleable C2 profiles allow attackers to modify the behavior of their C2 communication, making detection more difficult. Stopping these attacks in real time requires deep inline inspection and the ability to block zero-day and evasive threats. Advanced Threat Prevention (ATP) on PAN-OS 10.2 uses inline deep learning models to detect and block Cobalt Strike Malleable C2 attacks in real time. ATP is designed to prevent evasive techniques and zero-day threats, which is essential for blocking Malleable C2. PAN-OS 10.2 introduces enhanced capabilities for detecting malicious traffic patterns and inline analysis of encrypted traffic. ATP examines traffic behavior and signature-less threats, effectively stopping evasive C2 profiles. PAN-OS 10.2 includes real-time protections specifically for Malleable C2.

No community discussion yet for this question.