Skip to content

Commit 9dc57cd

Browse files
authored
Update README.md
1 parent 0d0698c commit 9dc57cd

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ BeaconEye scans running processes for active CobaltStrike beacons. When process
88

99
## How it works
1010

11-
BeaconEye attaches itself as a debugger to each process and will begin monitoring beacon activity for C2 traffic (HTTP/HTTPS beacons supported currently).
11+
If a suspected CobaltStrike beacon is found through scanning running processes, BeaconEye attaches itself as a debugger and will begin monitoring beacon activity for C2 traffic (HTTP/HTTPS beacons supported currently).
1212

1313
The AES keys used for encrypting C2 data and mallable profile are decoded on the fly, which enables BeaconEye to extract and decrypt beacon's output when commands are sent via the operator.
1414

@@ -38,6 +38,8 @@ BeaconEye should be considered **ALPHA**, I'm keen to get feedback on 4.x beacon
3838
* ~~Add command line argument for targeting specific processes~~
3939
* Add command line argument to specify output logging location
4040
* Add support for extracting operator commands
41+
* Support scanning MiniDump files
42+
4143

4244
## References and Thanks
4345

0 commit comments

Comments
 (0)