SOP-37: Suspicious Outbound Port Usage Response

SOC analyst SOP for suspicious outbound connections on non-standard ports. Covers known malicious ports, C2 beacon intervals, and unusual protocol usage.