Тут Cobalt Strike 4.11 вышел и плохие новости для Blue Team
"Cobalt Strike 4.11 introduces a DNS over HTTPS (DoH) Beacon, which provides another stealthy network egress option for Cobalt Strike users"
https://www.cobaltstrike.com/blog/cobalt-strike-411-shh-beacon-is-sleeping