detecting-beaconing-patterns-with-zeek

name	detecting-beaconing-patterns-with-zeek
description	Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT library to load Zeek logs into Pandas DataFrames, calculates inter-arrival time standard deviation, and flags periodic connections with low jitter. Use when hunting for command-and-control callbacks in network data.
domain	cybersecurity
subdomain	security-operations
tags	["network-security","zeek","c2-beaconing","conn-log-analysis","zat","threat-hunting","statistical-analysis"]
version	1.0
author	mahipal
license	Apache-2.0