← Go back to library

Query Censys for known command & control IPs add as IoCs in CrowdStrike

Continuously scan Censys for known Covenant Command and Control (C2) servers, adding them as individual IoCs in CrowdStrike. Maintain an up-to-date list of IPs within CrowdStrike by removing outdated servers and adding newly discovered ones.

Created by

Michael Tolan

How it works

Import this story to your tenant, from where you can adapt it to meet your unique needs.

Import
Was this story helpful?