Sniper A simple proof of concept for detecting use of Cobalt Strike's execute-assembly Tool for associated blog post at https://www.mdsec.co.uk/blog