Tag
This analytic identifies potential exploitation, command-and-control communication, or protocol abuse by monitoring Zeek logs for HTTP requests using non-standard or unexpected methods.