{"slug":"detecting-beaconing-patterns-with-zeek","source_name":"detecting-beaconing-patterns-with-zeek","name":"Detecting Beaconing Patterns With Zeek","description":"Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT library to load Zeek logs into Pandas DataFrames, calculates inter-arrival time standard deviation, and flags periodic connections with low jitter. Use when hunting for command-and-control callbacks in network data.","version":1,"lift":{"pass_rate_delta_pts":0,"pass_rate_pct":18.2,"total_cases":22,"passed_cases":4,"tokens_delta_pct":-7.9,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T01:53:38.243068+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":0,"with_pass_pct":50,"without_pass_pct":50,"tokens_delta_pct":-7.9,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":false,"completed_at":"2026-07-28T01:53:38.243068+00:00","run_id":"60305bfb-b44a-44a4-89e4-6e45807d67f9","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"c5baccb82bae720c2bcaf0331e696872223105b9f72f16b6cfb0c4edbe36a931","raw_url":"https://app.decimal.ai/s/detecting-beaconing-patterns-with-zeek/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/detecting-beaconing-patterns-with-zeek"}