hunting-for-command-and-control-beaconing

What problem does it solve?

This Skill enables proactive detection of command-and-control beaconing patterns in network telemetry, helping security teams identify compromised endpoints through periodic, anomaly-based traffic analysis.

Core Features & Use Cases

• Frequency analysis of connection timings to reveal regular beaconing intervals.
• Jitter detection and domain reputation checks to differentiate C2 activity from legitimate traffic.
• Output formats: machine-readable JSON findings and human-readable Markdown reports for incident response.

Quick Start

Run the hunting workflow against Zeek/HTTP/DNS logs to surface beaconing indicators.