<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# analyzing-c2-network-traffic — API Reference

## Agent Script

| Command | Description |
|---------|-------------|
| `capture --target <path>` | Capture and analyze C2 network traffic. |
| `extract --target <path>` | Extract C2 payloads from captured traffic. |
| `map --target <path>` | Map C2 infrastructure from traffic analysis. |

## Usage Examples

```bash
# Capture and analyze C2 network traffic.
node scripts/agent.js capture --target ./sample

# Extract C2 payloads from captured traffic.
node scripts/agent.js extract --target ./sample

# Map C2 infrastructure from traffic analysis.
node scripts/agent.js map --target ./sample
```

## Output Format

All commands return JSON with the following structure:

```json
{
  "action": "<command>",
  "result": {
    "action": "<command>",
    "status": "complete",
    "domain": "<domain>",
    "technique": "analyzing-c2-network-traffic"
  }
}
```
