Detecting cobalt strike beacon traffic