Elastic low stable kql
Statistical Model Detected C2 Beaconing Activity with High Confidence
A statistical model has identified command-and-control (C2) beaconing activity with high confidence. Beaconing can help attackers maintain stealthy communication with their C2 servers, receive instructions and payloads, exfiltrate data and maintain persistence in a network.
Detection Logic
beacon_stats.beaconing_score: 3 Field Validations
Loading…
Comments (0)
Loading comments...