Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag agent binary for deployment, aggregation server, offline ASN lookup.
Stealthy Loader-cum-dropper/stage-1/stager targeting Windows10
Threat hunt de beaconing guiado por hipótesis sobre telemetría Zeek (Security Onion): análisis estadístico de periodicidad y validación del analista.
Investigating periodic HTTP traffic with packet evidence, endpoint correlation and Splunk.
nRF52840 BLE Indoor Positioning System
Comprehensive static and dynamic analysis of a 32-bit Windows malware. Features MPRESS unpacking, API hashing evasion, shellcode injection, and C2 protocol reverse engineering.
Blue Team C2 Detection Lab using Sysmon, Winlogbeat, Suricata, and Grafana — detect PowerShell beaconing, simulate threats, and build real-world SOC skills with alerting and visualizations.
Network threat hunting: PCAP → Zeek → SQL hunts for C2 beaconing (timing regularity), DGA (DNS entropy) and exfiltration (byte asymmetry), scored against planted ground truth
Statistical C2 beacon detection engine — robust time-series analysis, composite scoring and graph-based campaign correlation, evaluated on CTU-13 (Zeek/NetFlow)
Offline PCAP analyzer that detects port scans, ARP spoofing, plaintext credentials, and C2 beaconing from packet captures
Detecting covert HTTPS beaconing from an internal host using network triage methods including firewall alerts, NetFlow analysis, and domain reputation tools.
Statistical C2 beaconing detection, JA3 TLS fingerprinting & DNS tunneling threat hunting engine
Find C2 beaconing in Zeek, Suricata, Sysmon, CSV and pcap logs. Catches beacons that miss check-ins or call dead servers, explains every finding, and writes a one-file HTML report. Evaluated on IoT-23 malware captures.
To associate your repository with the beaconing topic, visit your repo's landing page and select "manage topics."