Detecting covert HTTPS beaconing from an internal host using network triage methods including firewall alerts, NetFlow analysis, and domain reputation tools.
-
Updated
May 1, 2025 - Jupyter Notebook
#
network-triage
Here are 3 public repositories matching this topic...
This is a MAC flooding attack scenario: the attacker poisons the switch's internal memory by overwhelming it with fake MAC address mappings. As the switch fails open into broadcast mode, the attacker’s NIC (network interface card) now receives traffic not meant for it.
-
Updated
May 19, 2025 - Jupyter Notebook
his case study investigates a covert beaconing pattern in which a compromised host periodically sent outbound DNS queries to Google's public resolver (8.8.8.8) at 30-minute intervals without receiving responses.
-
Updated
May 12, 2025 - Jupyter Notebook
Improve this page
Add a description, image, and links to the network-triage topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the network-triage topic, visit your repo's landing page and select "manage topics."