Red Teaming With Cobalt Strike – Not So Obvious Features

This post is a practitioner-focused guide on using Cobalt Strike, covering GUI shortcuts, the web log and file synchronization, differences between stageless and stager payloads, Malleable C2 profile configuration (including spawn parameters, pipenames, and multiple URIs), process-spawning considerations and EDR detection, Beacon Object Files (BOFs), command queue management, basic PowerShell integration, and OPSEC recommendations (iptables + SSH tunneling). It is a how-to/lessons-learned writeup for red team operators rather than an incident report or threat disclosure.