Caldera C&C Sandcat Beaconing

MITRE Caldera is an adversary emulation framework that is associated with security testing. The Caldera framework enables security teams to emulate C&C communications through three different Caldera agents: Sandcat, Manx, and Ragdoll. The agents enable beaconing activity from a device over protocols such as HTTP, which helps them obscure their activity within legitimate traffic. Beaconing refers to short messages periodically sent from a compromised device to a C&C server requesting additional instructions from an attacker. The presence of C&C beaconing on your network simulates an attacker conducting a persistent attack.