Educational Purposes Only!! Today I'll be demoing Havoc C2 payload against Elastic agent. A mature SOC would be able to spot this with no issue using proper network monitoring and enriched rule sets. However, let us see what happens when you just download the payload and run additional commands. This should be fun. Enjoy!! Credits: https://github.com/HavocFramework/Havoc Elastic SIEM: https://www.elastic.co/security/siem Hack Tricks: https://book.hacktricks.xyz/windows-hardening/windows-local-privilege-escalation