CCDL2

Practice session

A malware sample communicates with its C2 over HTTPS but uses a self-signed certificate with an unusual Subject CN. Which network forensics technique is MOST effective for detecting this traffic pattern at scale?

Loading your practice session…