C&C Callback Token Variables

The following table describes token variables for customizing C&C Callback event notification messages.


For the list of standard token variables supported by all event notifications, see Standard Token Variables.




URL, IP address, or email address to which a compromised host attempts a callback


Affected host or email address


Name of the list that contains the callback address


Number of contacts made between callback addresses and compromised hosts


Number of compromised hosts involved in the outbreak


Number of callback addresses involved in the outbreak