Threat ID 86798 - BruteRatel C4 Command and Control Traffic Detection

MarcinWSTD · ‎09-21-2023

Hi all,

since yesterday I see this threat as a critical. I suppouse that is false posotive action.

Didn't find any suspicious actions on the computer and just want to know is there any of you that have observed similar alerts?

Maybe I have to dig deeper.

Thanks,

OtakarKlier · ‎09-21-2023

Hello,

I have not, but doesnt mean no one else has. I would enable extended packet capture on threats and then submit the pcap to support for review.

Regards,

MarcinWSTD · ‎09-22-2023

Thanks for that. I will take a look into it.

I can see rare occurence for that suspicious behavior.

I've implemented extended packet logging already and will see what to do next ...