C2Redirectors Always have a redirector in front of each part of the attack infrastructure Redirects traffic in order to obfuscate the backend systems Always use domain names Direct IP access... Nov 1, 2025 Sans Red-Team 2025 Lessons