Tag

Network Detection

Detection and investigation using network, DNS, proxy, TLS, flow, endpoint, and identity evidence.

2 resources

Resources in this tag

Detection Engineering

Command and Control in Cybersecurity: Detect and Respond

Learn how command-and-control channels work, which evidence reveals C2 activity, how to investigate it, and how to contain access without losing scope.

Sep 23, 2026

Detection Engineering

Encrypted Network Traffic: What Metadata Can and Cannot Tell You

Use metadata from encrypted traffic to assess communication behavior while keeping payload content, application identity, user intent, and attribution outside claims the evidence cannot supp...

Sep 16, 2026