classification: add command-and-control classtype

Added new classtype 'command-and-control' to be used with more
general TROJAN/MALWARE categories to designate traffic between
infected machine and c2 server.

diff --git a/classification.config b/classification.config
index 228737eaa355955563af62a242702c7849c803d2..d2fa5dcef83070045c3d1c630bb54cecb5d79193 100644 (file)
--- a/classification.config
+++ b/classification.config
@@ -75,3 +75,4 @@ config classification: pup-activity,Possibly Unwanted Program Detected,2
 config classification: credential-theft,Successful Credential Theft Detected,1
 config classification: social-engineering,Possible Social Engineering Attempted,2
 config classification: coin-mining,Crypto Currency Mining Activity Detected,2
+config classification: command-and-control,Malware Command and Control Activity Detected,1