Module 2 Assessment — Part B: Hunt a Beaconing Hypothesis

Hypothesis: 'A host is beaconing to command-and-control at a fixed sub-5-minute interval to a rare external destination.' You have outbound-flow summaries and enrichment for the window. Hunt it: pivot, rule out the benign update-check explanation, judge confidence, decide.