c2-defense-ops
Run scoped C2 simulation defense operations for Cobalt Strike-like traffic, redirector behavior, reverse-shell telemetry, and SharpKatz-style credential access detection. Use for detection engineering, controlled purple-team replay, and containment validation in documented scope.
- Version
- 1.0
Pinned to revision ad6fe4ba362b, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/c2-defense-ops/SKILL.md
- skills/c2-defense-ops/agents/openai.yaml
- skills/c2-defense-ops/assets/icon-128.png
- skills/c2-defense-ops/assets/icon-32.png
- skills/c2-defense-ops/metadata.json
- skills/c2-defense-ops/references/cobalt-strike-defense.md
- skills/c2-defense-ops/references/engagement-boundary.md
- skills/c2-defense-ops/references/latest-sources.md
- skills/c2-defense-ops/references/redwarden-detection.md
- skills/c2-defense-ops/references/reverse-shell-detection.md
- skills/c2-defense-ops/references/sharpkatz-defense.md
- skills/c2-defense-ops/rules/framework.md
- skills/c2-defense-ops/rules/rules.md
- skills/c2-defense-ops/scripts/c2_scope_guard.py
Every link opens the file at its source, pinned to the revision this page describes.