[ {"frame.number": 1, "frame.time": "2026-01-22 11:22:01.001", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "google.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 2, "frame.time": "2026-01-22 11:22:01.144", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "google.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 3, "frame.time": "2026-01-22 11:22:01.892", "ip.src": "192.168.1.15", "ip.dst": "8.8.8.8", "dns.qry.name": "outlook.office365.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 4, "frame.time": "2026-01-22 11:22:02.031", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.15", "dns.qry.name": null, "dns.resp.name": "outlook.office365.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 5, "frame.time": "2026-01-22 11:22:02.448", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 6, "frame.time": "2026-01-22 11:22:02.619", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 70, "dns.flags.response": 1, "seq": 1}, {"frame.number": 7, "frame.time": "2026-01-22 11:22:03.112", "ip.src": "192.168.1.22", "ip.dst": "8.8.8.8", "dns.qry.name": "api.slack.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 8, "frame.time": "2026-01-22 11:22:03.241", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.22", "dns.qry.name": null, "dns.resp.name": "api.slack.com", "dns.resp.ttl": 60, "dns.flags.response": 1}, {"frame.number": 9, "frame.time": "2026-01-22 11:22:03.889", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 10, "frame.time": "2026-01-22 11:22:04.058", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 79, "dns.flags.response": 1, "seq": 2}, {"frame.number": 11, "frame.time": "2026-01-22 11:22:04.445", "ip.src": "192.168.1.10", "ip.dst": "8.8.8.8", "dns.qry.name": "teams.microsoft.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 12, "frame.time": "2026-01-22 11:22:04.612", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.10", "dns.qry.name": null, "dns.resp.name": "teams.microsoft.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 13, "frame.time": "2026-01-22 11:22:05.331", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 14, "frame.time": "2026-01-22 11:22:05.502", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 73, "dns.flags.response": 1, "seq": 3}, {"frame.number": 15, "frame.time": "2026-01-22 11:22:05.991", "ip.src": "192.168.1.31", "ip.dst": "8.8.8.8", "dns.qry.name": "github.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 16, "frame.time": "2026-01-22 11:22:06.122", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.31", "dns.qry.name": null, "dns.resp.name": "github.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 17, "frame.time": "2026-01-22 11:22:06.778", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 18, "frame.time": "2026-01-22 11:22:06.941", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 76, "dns.flags.response": 1, "seq": 4}, {"frame.number": 19, "frame.time": "2026-01-22 11:22:07.331", "ip.src": "192.168.1.55", "ip.dst": "1.1.1.1", "dns.qry.name": "fonts.googleapis.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 20, "frame.time": "2026-01-22 11:22:07.489", "ip.src": "1.1.1.1", "ip.dst": "192.168.1.55", "dns.qry.name": null, "dns.resp.name": "fonts.googleapis.com", "dns.resp.ttl": 86400, "dns.flags.response": 1}, {"frame.number": 21, "frame.time": "2026-01-22 11:22:08.224", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 22, "frame.time": "2026-01-22 11:22:08.391", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 123, "dns.flags.response": 1, "seq": 5}, {"frame.number": 23, "frame.time": "2026-01-22 11:22:09.011", "ip.src": "192.168.1.10", "ip.dst": "8.8.8.8", "dns.qry.name": "login.microsoftonline.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 24, "frame.time": "2026-01-22 11:22:09.178", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.10", "dns.qry.name": null, "dns.resp.name": "login.microsoftonline.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 25, "frame.time": "2026-01-22 11:22:09.667", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 26, "frame.time": "2026-01-22 11:22:09.839", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 116, "dns.flags.response": 1, "seq": 6}, {"frame.number": 27, "frame.time": "2026-01-22 11:22:10.334", "ip.src": "192.168.1.22", "ip.dst": "8.8.8.8", "dns.qry.name": "wss-primary.slack.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 28, "frame.time": "2026-01-22 11:22:10.501", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.22", "dns.qry.name": null, "dns.resp.name": "wss-primary.slack.com", "dns.resp.ttl": 120, "dns.flags.response": 1}, {"frame.number": 29, "frame.time": "2026-01-22 11:22:11.114", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 30, "frame.time": "2026-01-22 11:22:11.284", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 116, "dns.flags.response": 1, "seq": 7}, {"frame.number": 31, "frame.time": "2026-01-22 11:22:11.778", "ip.src": "192.168.1.15", "ip.dst": "8.8.8.8", "dns.qry.name": "graph.microsoft.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 32, "frame.time": "2026-01-22 11:22:11.934", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.15", "dns.qry.name": null, "dns.resp.name": "graph.microsoft.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 33, "frame.time": "2026-01-22 11:22:12.557", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 34, "frame.time": "2026-01-22 11:22:12.731", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 108, "dns.flags.response": 1, "seq": 8}, {"frame.number": 35, "frame.time": "2026-01-22 11:22:13.118", "ip.src": "192.168.1.55", "ip.dst": "1.1.1.1", "dns.qry.name": "cdn.jsdelivr.net", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 36, "frame.time": "2026-01-22 11:22:13.289", "ip.src": "1.1.1.1", "ip.dst": "192.168.1.55", "dns.qry.name": null, "dns.resp.name": "cdn.jsdelivr.net", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 37, "frame.time": "2026-01-22 11:22:14.004", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 38, "frame.time": "2026-01-22 11:22:14.178", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 95, "dns.flags.response": 1, "seq": 9}, {"frame.number": 39, "frame.time": "2026-01-22 11:22:14.667", "ip.src": "192.168.1.31", "ip.dst": "8.8.8.8", "dns.qry.name": "api.github.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 40, "frame.time": "2026-01-22 11:22:14.834", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.31", "dns.qry.name": null, "dns.resp.name": "api.github.com", "dns.resp.ttl": 60, "dns.flags.response": 1}, {"frame.number": 41, "frame.time": "2026-01-22 11:22:15.448", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 42, "frame.time": "2026-01-22 11:22:15.621", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 99, "dns.flags.response": 1, "seq": 10}, {"frame.number": 43, "frame.time": "2026-01-22 11:22:16.002", "ip.src": "192.168.1.10", "ip.dst": "8.8.8.8", "dns.qry.name": "outlook.office365.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 44, "frame.time": "2026-01-22 11:22:16.171", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.10", "dns.qry.name": null, "dns.resp.name": "outlook.office365.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 45, "frame.time": "2026-01-22 11:22:16.891", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 46, "frame.time": "2026-01-22 11:22:17.068", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 48, "dns.flags.response": 1, "seq": 11}, {"frame.number": 47, "frame.time": "2026-01-22 11:22:17.556", "ip.src": "192.168.1.55", "ip.dst": "1.1.1.1", "dns.qry.name": "unpkg.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 48, "frame.time": "2026-01-22 11:22:17.722", "ip.src": "1.1.1.1", "ip.dst": "192.168.1.55", "dns.qry.name": null, "dns.resp.name": "unpkg.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 49, "frame.time": "2026-01-22 11:22:18.335", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 50, "frame.time": "2026-01-22 11:22:18.507", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 118, "dns.flags.response": 1, "seq": 12}, {"frame.number": 51, "frame.time": "2026-01-22 11:22:19.001", "ip.src": "192.168.1.22", "ip.dst": "8.8.8.8", "dns.qry.name": "slack.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 52, "frame.time": "2026-01-22 11:22:19.168", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.22", "dns.qry.name": null, "dns.resp.name": "slack.com", "dns.resp.ttl": 60, "dns.flags.response": 1}, {"frame.number": 53, "frame.time": "2026-01-22 11:22:19.779", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 54, "frame.time": "2026-01-22 11:22:19.947", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 51, "dns.flags.response": 1, "seq": 13}, {"frame.number": 55, "frame.time": "2026-01-22 11:22:20.444", "ip.src": "192.168.1.15", "ip.dst": "8.8.8.8", "dns.qry.name": "login.microsoftonline.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 56, "frame.time": "2026-01-22 11:22:20.612", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.15", "dns.qry.name": null, "dns.resp.name": "login.microsoftonline.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 57, "frame.time": "2026-01-22 11:22:21.223", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 58, "frame.time": "2026-01-22 11:22:21.397", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 114, "dns.flags.response": 1, "seq": 14}, {"frame.number": 59, "frame.time": "2026-01-22 11:22:21.891", "ip.src": "192.168.1.10", "ip.dst": "8.8.8.8", "dns.qry.name": "teams.microsoft.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 60, "frame.time": "2026-01-22 11:22:22.061", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.10", "dns.qry.name": null, "dns.resp.name": "teams.microsoft.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 61, "frame.time": "2026-01-22 11:22:22.669", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 62, "frame.time": "2026-01-22 11:22:22.841", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 116, "dns.flags.response": 1, "seq": 15}, {"frame.number": 63, "frame.time": "2026-01-22 11:22:23.334", "ip.src": "192.168.1.31", "ip.dst": "8.8.8.8", "dns.qry.name": "avatars.githubusercontent.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 64, "frame.time": "2026-01-22 11:22:23.502", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.31", "dns.qry.name": null, "dns.resp.name": "avatars.githubusercontent.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 65, "frame.time": "2026-01-22 11:22:24.115", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 66, "frame.time": "2026-01-22 11:22:24.289", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 95, "dns.flags.response": 1, "seq": 16}, {"frame.number": 67, "frame.time": "2026-01-22 11:22:24.778", "ip.src": "192.168.1.55", "ip.dst": "1.1.1.1", "dns.qry.name": "cloudflare.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 68, "frame.time": "2026-01-22 11:22:24.946", "ip.src": "1.1.1.1", "ip.dst": "192.168.1.55", "dns.qry.name": null, "dns.resp.name": "cloudflare.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 69, "frame.time": "2026-01-22 11:22:25.557", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 70, "frame.time": "2026-01-22 11:22:25.729", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 99, "dns.flags.response": 1, "seq": 17}, {"frame.number": 71, "frame.time": "2026-01-22 11:22:26.224", "ip.src": "192.168.1.22", "ip.dst": "8.8.8.8", "dns.qry.name": "api.slack.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 72, "frame.time": "2026-01-22 11:22:26.391", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.22", "dns.qry.name": null, "dns.resp.name": "api.slack.com", "dns.resp.ttl": 60, "dns.flags.response": 1}, {"frame.number": 73, "frame.time": "2026-01-22 11:22:27.001", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 74, "frame.time": "2026-01-22 11:22:27.175", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 104, "dns.flags.response": 1, "seq": 18}, {"frame.number": 75, "frame.time": "2026-01-22 11:22:27.668", "ip.src": "192.168.1.10", "ip.dst": "8.8.8.8", "dns.qry.name": "graph.microsoft.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 76, "frame.time": "2026-01-22 11:22:27.834", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.10", "dns.qry.name": null, "dns.resp.name": "graph.microsoft.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 77, "frame.time": "2026-01-22 11:22:28.446", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 78, "frame.time": "2026-01-22 11:22:28.619", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 52, "dns.flags.response": 1, "seq": 19}, {"frame.number": 79, "frame.time": "2026-01-22 11:22:29.113", "ip.src": "192.168.1.31", "ip.dst": "8.8.8.8", "dns.qry.name": "github.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 80, "frame.time": "2026-01-22 11:22:29.282", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.31", "dns.qry.name": null, "dns.resp.name": "github.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 81, "frame.time": "2026-01-22 11:22:29.889", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 82, "frame.time": "2026-01-22 11:22:30.063", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 110, "dns.flags.response": 1, "seq": 20}, {"frame.number": 83, "frame.time": "2026-01-22 11:22:30.557", "ip.src": "192.168.1.55", "ip.dst": "1.1.1.1", "dns.qry.name": "fonts.gstatic.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 84, "frame.time": "2026-01-22 11:22:30.724", "ip.src": "1.1.1.1", "ip.dst": "192.168.1.55", "dns.qry.name": null, "dns.resp.name": "fonts.gstatic.com", "dns.resp.ttl": 86400, "dns.flags.response": 1}, {"frame.number": 85, "frame.time": "2026-01-22 11:22:31.334", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 86, "frame.time": "2026-01-22 11:22:31.508", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 110, "dns.flags.response": 1, "seq": 21}, {"frame.number": 87, "frame.time": "2026-01-22 11:22:32.001", "ip.src": "192.168.1.22", "ip.dst": "8.8.8.8", "dns.qry.name": "slack.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 88, "frame.time": "2026-01-22 11:22:32.168", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.22", "dns.qry.name": null, "dns.resp.name": "slack.com", "dns.resp.ttl": 60, "dns.flags.response": 1}, {"frame.number": 89, "frame.time": "2026-01-22 11:22:32.779", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 90, "frame.time": "2026-01-22 11:22:32.951", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 51, "dns.flags.response": 1, "seq": 22}, {"frame.number": 91, "frame.time": "2026-01-22 11:22:33.444", "ip.src": "192.168.1.10", "ip.dst": "8.8.8.8", "dns.qry.name": "outlook.office365.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 92, "frame.time": "2026-01-22 11:22:33.612", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.10", "dns.qry.name": null, "dns.resp.name": "outlook.office365.com", "dns.resp.ttl": 3600, "dns.flags.response": 1}, {"frame.number": 93, "frame.time": "2026-01-22 11:22:34.221", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 94, "frame.time": "2026-01-22 11:22:34.395", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 108, "dns.flags.response": 1, "seq": 23}, {"frame.number": 95, "frame.time": "2026-01-22 11:22:34.889", "ip.src": "192.168.1.15", "ip.dst": "8.8.8.8", "dns.qry.name": "login.microsoftonline.com", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 96, "frame.time": "2026-01-22 11:22:35.058", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.15", "dns.qry.name": null, "dns.resp.name": "login.microsoftonline.com", "dns.resp.ttl": 300, "dns.flags.response": 1}, {"frame.number": 97, "frame.time": "2026-01-22 11:22:35.667", "ip.src": "192.168.1.88", "ip.dst": "8.8.8.8", "dns.qry.name": "cmd.exfil.badactor.cc", "dns.resp.name": null, "dns.resp.ttl": null, "dns.flags.response": 0}, {"frame.number": 98, "frame.time": "2026-01-22 11:22:35.841", "ip.src": "8.8.8.8", "ip.dst": "192.168.1.88", "dns.qry.name": null, "dns.resp.name": "cmd.exfil.badactor.cc", "dns.resp.ttl": 125, "dns.flags.response": 1, "seq": 24} ]