AzureC2Relay is an Azure cloud C2 relay deployment project, not an endpoint implant. Its README and author's article describe an HTTP(S) Azure Function that checks Cobalt Strike Malleable C2 request fields, relays matches to a team server in the same virtual network, and redirects other requests to a decoy; Terraform provisions the CDN, Function App, and VM. The current published Function code accepts requests when profile rules are absent, checks user agent/path/headers but not query parameters, overwrites a configured decoy with http://microsoft.com, and accepts all upstream TLS certificates; verify or patch these behaviors before use.
C#, Terraform (HCL)
RESTRICTED_ACCESS_BLUR_MARKER