Cloudflare Tunnel
Named by 5 kept items in this workspace.
4 items name it under tools and 1 under affected products.
The items that name it 5
Client updated by Cloudflare to mitigate the compromised certificates
Creates an outbound-only tunnel from the application server so all inbound IP traffic can be closed and no public origin IP is needed
Used to provide remote, encrypted, zero-open-port access to the local CyberStrike Web UI server
Used by threat actors to tunnel C2 traffic out of the network through 'known good' domains; installed in Incident 1 and Incident 3 (after being quarantined by Windows Defender three times)
In every workspace you can read 7
Security
All technologies in this workspace.