Botnets function as networks of compromised devices (bots) controlled by a central entity (botmaster) to perform malicious activities like DDoS attacks and data theft. Infection occurs through malware, followed by communication via Command and Control (C2) protocols like IRC, P2P, or HTTP/HTTPS. Mitigation requires detection through monitoring and dismantling the C2 infrastructure. For more details, visit Purdue Engineering . Interpret Botnet Report Output - Palo Alto Networks