New Features

• Users can choose to scan ALL (x64) running processes for Cobalt Strike beacons instead of just injected threads
• '-d' option allows scanning of all dump files in a directory for Cobalt Strike beacons
• Added support for scanning of large dump files (> 2GB) e.g. RAM captures. (won't output process information)
• Added ability to detect and parse non-encoded configuration sections (usually found when trial versions of Cobalt Strike are used)

Bug Fixes

• Scanning a dump file would only parse and output the first beacon detection.
• Stopped outputting multiple instances of the same beacon from a single process/file