Packet capture and traffic analysis â tracing C2 communication, exploitation, and lateral movement.