From 14cc56de00081d1e38f7163ec52a38ad317a8c8d Mon Sep 17 00:00:00 2001 From: richcollier Date: Wed, 25 Nov 2020 07:44:57 -0500 Subject: [PATCH] Update ml-info-functions.asciidoc fixed abbreviation for command and control. It is "C2" not "C2C" --- .../ml/anomaly-detection/functions/ml-info-functions.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/reference/ml/anomaly-detection/functions/ml-info-functions.asciidoc b/docs/reference/ml/anomaly-detection/functions/ml-info-functions.asciidoc index ea101428855..81d8c740044 100644 --- a/docs/reference/ml/anomaly-detection/functions/ml-info-functions.asciidoc +++ b/docs/reference/ml/anomaly-detection/functions/ml-info-functions.asciidoc @@ -4,7 +4,7 @@ The information content functions detect anomalies in the amount of information that is contained in strings within a bucket. These functions can be used as a more sophisticated method to identify incidences of data exfiltration or -C2C activity, when analyzing the size in bytes of the data might not be sufficient. +C2 (Command and Control) activity, when analyzing the size in bytes of the data might not be sufficient. The {ml-features} include the following information content functions: