drop irc log files · detect bot commands · extract c2 channels · nick patterns · command flood · runs locally