onyphe -search 'category:ctiscan app.device:c2 -dayago:0 | uniq ip.dest | addcount | fields count' | tail -n 1 {"count":236} #C2 #CTI #ThreatHunting