flare

Helps to find command and control beacons against data already ingested into Elasticsearch (supports netflow, Zeek, and likely any standard connection log).

By Austin Taylor ,
Justin Henderson