domains / families / security / detecting-beaconing-patterns-with-zeek
detecting-beaconing-patterns-with-zeek
separate
'Performs statistical analysis of Zeek conn.log connection intervals
When to use
- When investigating security incidents that require detecting beaconing patterns with zeek
- When building detection rules or threat hunting queries for this domain
- When SOC analysts need structured procedures for this analysis type
- When validating security monitoring coverage for related attack techniques
Skill page
Source