Art of the Hunt: Building a Threat Hunting Hypothesis List – Security Boulevard

… command and control server to communicate with the infected systems. … to certain files and communication with the competitor’s employees. Read source