Results for “c2-indicators”

Parse and analyze Cobalt Strike Malleable C2 profiles using dissect.cobaltstrike and pyMalleableC2 to extract C2 indicators, detect evasion techniques, and generate network detection signatures.

Recommends ACE inhibitors, ARBs, or calcium channel blockers as first-line hypertension therapy rather than β‑adrenergic blockers in obese patients with type 2 diabetes. Triggers include when a clinician asks, 'What antihypertensive should I start for this obese patient with T2DM to avoid weight gain?' or 'Should I avoid β‑blockers in this patient with diabetes and hypertension?'

Architect C2 redirectors with nginx and Apache, derive filter rules from malleable profiles, and apply OPSEC controls for resilient red-team infrastructure.

Detect C2 beaconing patterns in network traffic using frequency analysis, jitter detection, and domain reputation to identify compromised endpoints communicating with adversary infrastructure.

Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures, data encoding, and infrastructure for detection development and threat intelligence.

Find Earth2Studio models, data sources, and examples for weather/climate use cases by consulting live documentation and verifying compatibility via the lexicon system.

Identifies which items (pages, campaigns, products, channels, regions) had the biggest increases or decreases for a key metric between two time periods.

Automates SOC 2 Type II audit preparation including gap assessment, evidence collection from cloud providers and identity systems, control testing validation, remediation tracking, and continuous compliance monitoring.

Detects command-and-control (C2) communications tunneled through DNS protocol, including DNS tunneling tools, domain generation algorithms, and encoded payload delivery via TXT/CNAME records.

Identify command-and-control beaconing patterns in network traffic by applying statistical frequency analysis, jitter calculation, and coefficient of variation scoring to detect periodic callbacks from compromised endpoints.

VS-Enhanced Qualitative Design Consultant with Ethnography & Action Research Enhanced VS 3-Phase process: Avoids overused phenomenology, proposes context-optimal qualitative strategies Absorbed H1 (Ethnographic Research Advisor) and H2 (Action Research Facilitator) capabilities Use when: selecting qualitative research design, planning phenomenology/grounded theory/case study/ethnography/action research Triggers: phenomenology, 현상학, grounded theory, 근거이론, case study, 사례연구, narrative inquiry, ethnography, 민족지, action research, 실행연구, qualitative design

Benchmarks language model agents on the C2C multi-agent negotiation task, reporting win rate across starting positions.

Analyzes Zeek conn.log connection intervals using statistical methods to detect C2 beaconing patterns, flagging periodic connections with low jitter.

Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and threat intelligence sharing.

Recommends weight‑losing and weight‑neutral medications as first‑ and second‑line agents for managing overweight/obese patients with type 2 diabetes. Triggers include when a clinician asks, 'Which diabetes medications will not worsen weight in this obese patient?' or 'Should I avoid sulfonylureas in this patient with T2DM and obesity due to weight gain risk?'

Detect domain fronting C2 traffic by analyzing SNI vs HTTP Host header mismatches in proxy logs and TLS certificate discrepancies using pyOpenSSL for certificate inspection.

Performance Profiler

BISON v2.0 — Conviction Holder (Hardened). Top 10 assets by volume. All signals are score contributors — no hard gates. Scanner enters via create_position internally (Wolverine pattern). RatchetStop exits. Thesis exit REMOVED. v2.0: every hard gate converted to score contributor, ensureExecutionAsTaker=false, conviction-scaled margin 25-37%.

Systematic audit and review by Referee 2. Two modes — "deck" reviews slide presentations for rhetoric, visual quality, and compile cleanliness; "code" performs cross-language replication and econometric audit of empirical pipelines. Use when reviewing slides, auditing code, or verifying replication.

Daily B2B prospect search via Apollo against the brand's ICP, with deduplication, scoring, and Notion CRM dropoff. Runs daily on cron schedule.

Tracks indicators of compromise from initial discovery through validation, enrichment, deployment, monitoring, and retirement to maintain a high-quality, actionable indicator database.

`analysis-agent`/`task-agent`/`review-agent`: use when a critical assembled journey needs proof unavailable below E2E; skip risks proved by component, seam, or contract tests.

Analyze network traffic, logs, and data flows to detect potential data exfiltration via DNS tunneling, cloud storage uploads, encrypted channels, and other indicators of compromise.

Discover KOLs and micro-influencers relevant to your ICP across LinkedIn, Instagram, YouTube, and Twitter

Track key contacts who change jobs and draft warm outreach to movers at ICP companies

Cross-runtime 2-stage pipeline for Claude Code, Codex/OMX, and Gemini/Antigravity/OMA: trace causal hypotheses, inject evidence into deep-interview style requirements crystallization, then hand off to the right runtime planner/executor.

Computes the R2Score metric using torchmetrics, handling single and multi-output predictions with options for adjusted and variance-weighted scores.

Use to measure customer effort from behavioural signals instead of CES surveys, and to audit whether a composite effort score is honest. Trigger for "customer effort score", "behavioural CES", effort without survey, repeat contacts and channel switches, transfers and reopens, or "our CES doesn't match operational data".

Design a comprehensive product metrics dashboard with key metrics, data sources, visualization types, and alert thresholds.

Navigate the Ethereum L2 landscape: Arbitrum, Optimism, Base, zkSync, Unichain, and Celo. Covers how they work, deployment, bridging, and selection criteria, including 2025–2026 updates.

Provides startup metrics frameworks and stage-specific benchmarks for SaaS, Marketplace, Consumer, and B2B models, including investor-ready dashboard generation.

Analyzes federal contract competitors, incumbents, and obligation trends using live USAspending.gov data via the usaspending MCP, supporting black-hat competitor research and contract-number-first obligation analysis.

Select oral and injectable glucose-lowering agents for a newly diagnosed patient with type 2 diabetes using a compelling-indication hierarchy (heart failure → ASCVD → DKD → obesity) followed by glucose-pattern matching. Incorporates modern GLP-1 receptor agonists — Ozempic (semaglutide SC, T2D), Mounjaro (tirzepatide), and Wegovy/Noveltreat (semaglutide 2.4 mg, obesity). Use when a clinician asks "what drug to start for newly diagnosed T2D", "which OAD to use", "first-line diabetes medication", "SGLT2i vs GLP-1 in new T2D", or presents a newly diagnosed T2D patient needing a personalised medication plan.

Queries CDC open data and WHO Global Health Observatory indicators for public health intelligence, covering disease surveillance, vaccinations, and mortality.

Guides comorbidity-stratified selection of initial and further glucose-lowering medicines for adults with type 2 diabetes using the NICE NG28 (2026) framework, covering six clinical profiles: no relevant comorbidity, heart failure, atherosclerotic cardiovascular disease, early onset, obesity, chronic kidney disease, and frailty.