From 8b6753a47297215536604a0854260ff4d9c5a3a2 Mon Sep 17 00:00:00 2001
From: pe3zx <pe3zx@users.noreply.github.com>
Date: Mon, 9 Aug 2021 10:02:53 +0700
Subject: [PATCH] Add: CCob/BeaconEye to DFIR section

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 22c2be2..edfd871 100644
--- a/README.md
+++ b/README.md
@@ -1172,6 +1172,10 @@ This repository is created as an online bookmark for useful links, resources and
         <td><a href="https://github.com/carmaa/inception">carmaa/inception</a></td>
         <td>Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/CCob/BeaconEye">CCob/BeaconEye</a></td>
+        <td>Hunts out CobaltStrike beacons and logs operator command output</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/chrisandoryan/Nethive-Project">chrisandoryan/Nethive-Project</a></td>
         <td>Restructured and Collaborated SIEM and CVSS Infrastructure. Presented at Blackhat Asia Arsenal 2020.</td>