Detect C2 Beaconing

Red: launch a C2 implant that beacons back to your team server. Blue: detect the regular, low-and-slow callback pattern and tie the network connection back to the offending process.