medium10 pts · first answer countsthreat-huntingzeeknetwork-security
Spotting C2 beaconing
Which pattern in proxy or Zeek connection logs most strongly suggests command-and-control beaconing?
Discussion 0
Join free to post in the discussion.
Related questions
- IDS vs IPSCybersecurity Analyst
- What makes a firewall stateful?Cybersecurity Analyst
- Unusual DNS trafficCybersecurity Analyst
- Read a Suricata ruleCybersecurity Analyst
- Odd queries in Zeek dns.logCybersecurity Analyst
- A good threat hunting hypothesisCybersecurity Analyst
- DNS logs went quietCybersecurity Analyst
- Why JA4 replaced JA3Cybersecurity Analyst