Zeek Conn Log Analysis — Tracking periodic beaconing and long-term C2 connections

Hard GIAC GCIA cybersecurity drill: You are an Intrusion Analyst at Apex Defense. The SOC suspects a dormant APT group has established persistence on an