Transfer Utilities Making Public Network Connections

Awais Munir@iawais

•updated 2 days ago•2•1•4

Network-layer view: catches obfuscated or wrapped command lines and gives destination context for pivoting. Network and process events are unioned and paired per process on aid + process ID. The process side is pre-filtered to transfer tools, so the union stays small.