Offline C&C communication detection system