DETECTING C2-JITTERED BEACONS WITH FREQUENCY ANALYSIS

Summary from the TLDR InfoSec newsletter

Frequency analysis is a technique that allows for the detection of anomalies in a set of data. This post details how Fourier Transforms can be used to shift data to the frequency domain and then detect C2 beaconing behavior. When a C2 beacon utilizes jitter to vary its periodicity, a sliding window must be used to properly detect the activity.