Elastic low stable kql

Statistical Model Detected C2 Beaconing Activity with High Confidence

A statistical model has identified command-and-control (C2) beaconing activity with high confidence. Beaconing can help attackers maintain stealthy communication with their C2 servers, receive instructions and payloads, exfiltrate data and maintain persistence in a network.

View Source

Detection Logic

beacon_stats.beaconing_score: 3

Field Validations

Loading…

Comments (0)

Loading comments...