Cobalt Strike

A commercial adversary-simulation framework whose Beacon implant provides command and control, lateral movement and post-exploitation tooling. Cracked copies are widely used by ransomware operators, so its presence is a strong compromise indicator.