Possible Adaptix C2 Beacon Generic URIs

Collin Lairamore@Bollinmore

•updated Jul 28, 2026•0•0•5

Detects high-frequency outbound HTTP traffic matching specific URI patterns associated with potential Adaptix C2 beaconing behavior. The rule uses a sliding window threshold (10 requests within 600 seconds) to identify repetitive check-in patterns, which is a common characteristic of malware command-and-control channels.