Sent–
Received–
Processes–
Destinations–
Samples–
Suspicious flows
| Process | Remote | Flags | Beacon score | Period | Events | Sent | Received | Sent:Recv | Identity |
|---|
Traffic over time
Top talkers
“Active” is the share of sampled intervals with traffic. High activity with low volume is how a quiet beacon looks. Click a row to filter destinations.| Process | PIDs | Identity | Dests | Sent | Received | Active | Last seen |
|---|
Destinations
| Process | Remote | Host | Sent | Received | Intervals | Last seen |
|---|
Host names come from reverse DNS. “unverified” means the name does not resolve back to the IP, so it may be spoofed.