The Advanced Callback Detection framework provides an effective solution to detect and identify bot infected machines in a network. It takes a two-fold approach to detect bots:
Correlate multiple different attacks being carried out in different network sessions.
Use a heuristic based approach that detects behaviors of bots.
This approach allows the framework to detect both known and 0-day bots.