MITRE ATT&CK Matrix – C2 Connection Proxy

Identifying Long Connections with Bro/Zeek

DNS Backdoors?