# cs-extract-key.py
# Extract AES and HMAC encryption keys from Cobalt Strike beacon process memory dumps
# Docs: https://docs.remnux.org/discover-the-tools/examine+static+properties/deobfuscation

% cobalt-strike, encryption, key-extraction

# Basic usage
cs-extract-key.py -f <process_dump>