Investigate an escalated command-and-control beaconing alert. Confirms
the periodicity and destination are really C2, scopes which hosts and
processes are beaconing, identifies the implant or framework where it
can, and checks for hands-on-keyboard follow-through before returning a
verdict with containment actions.
