domains / families / security / hunting-for-command-and-control-beaconing

hunting-for-command-and-control-beaconing

separate

Detect C2 beaconing patterns in network traffic using frequency analysis,

When to use

• When proactively hunting for compromised systems in the network
• After threat intel indicates C2 frameworks targeting your industry
• When investigating periodic outbound connections to suspicious domains
• During incident response to identify active C2 channels
• When DNS query logs show unusual patterns to specific domains

Skill page

Source