Command & Control
Last updated
Last updated
The Command & Control (C2) alert category within the n.Scope Network Detection and Response (NDR) platform is critical for identifying and mitigating threats where attackers seek to establish a remote foothold within a network. C2 communications are a hallmark of advanced persistent threats (APTs) and botnets, where compromised systems are controlled by an external attackerβs server, often for malicious purposes such as data exfiltration, lateral movement, or further exploitation. The alerts in this category are designed to detect the telltale signs of such communicationsβirregular traffic patterns, suspicious outbound connections, or known malicious IP addresses and domains. By leveraging the n.Scope NDR's advanced analytics and threat intelligence, these alerts enable security teams to quickly isolate affected systems and disrupt the attackers' control channels.