hunting-for-beaconing-with-frequency-analysis

What problem does it solve?

Identify periodic beaconing patterns in network traffic to reveal covert command-and-control channels and automate detection.

Core Features & Use Cases

• Statistical frequency analysis of connection flows to identify regular beacons.
• Jitter and data-size consistency scoring to distinguish automated C2 from legitimate polling.
• Threat intelligence enrichment and risk scoring to prioritize investigations.
• Use Case: Monitor enterprise networks for DNS/HTTP/TLS beaconing indicating compromised endpoints.

Quick Start

Run the beaconing analysis on Zeek logs to uncover periodic C2 traffic.