{"width":"100%","author_name":"disconinja","author_url":"https://blog.hatena.ne.jp/disconinja/","version":"1.0","published":"2026-07-26 16:33:09","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fdisconinja.hatenablog.com%2Fentry%2F2026%2F07%2F26%2F163309\" title=\"Weekly Threat Infrastructure Investigation(Week30) - Weekend Researcher Tsurezure Diary\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/d/disconinja/20260726/20260726161516.png","blog_title":"Weekend Researcher Tsurezure Diary","provider_url":"https://hatena.blog","url":"https://disconinja.hatenablog.com/entry/2026/07/26/163309","blog_url":"https://disconinja.hatenablog.com/","provider_name":"Hatena Blog","type":"rich","height":"190","categories":[],"title":"Weekly Threat Infrastructure Investigation(Week30)","description":"Hunting for enemy infrastructure \u6982\u8981 / Overview \u672c\u8abf\u67fb\u3067\u306f\u3001Censys\u306e\u691c\u7d22\u6a5f\u80fd\u3092\u7528\u3044\u3066\u3001\u5168\u4e16\u754c\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u306b\u5c55\u958b\u3055\u308c\u3066\u3044\u308bC2\uff08Command and Control\uff09\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u7db2\u7f85\u7684\u306b\u8abf\u67fb\u30fb\u5206\u6790\u3057\u307e\u3057\u305f\u3002 \u8abf\u67fb\u671f\u9593\uff082026\u5e747\u670820\u65e5\u301c7\u670826\u65e5\uff09\u306b\u304a\u3044\u3066\u3001\u30b0\u30ed\u30fc\u30d0\u30eb\u3067\u5408\u8a0841\u4ef6\u306eC2\u30b5\u30fc\u30d0\u30fc\u3092\u7279\u5b9a\u3057\u307e\u3057\u305f\u3002\u672c\u8abf\u67fb\u3067\u306f\u3001Cobalt Strike \u3092\u306f\u3058\u3081\u3001SuperShell, Mythic, Sliver, Havoc, Empire, NimPlant \u3068\u3044\u3063\u305f\u591a\u5c90\u306b\u308f\u305f\u308bC2\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3092\u76e3\u8996\u5bfe\u8c61\u3068\u3057\u3066\u304a\u308a\u3001\u653b\u6483\u2026"}