Using data from the Akamai Intelligent PlatformTM, Akamai has developed a new analysis technique for web application layer botnets. By locating WAF triggers related to both Remote File Inclusion attacks and OS Command Injection attacks, researchers used aggregated results to map multiple botnets operating in the studied time period. Viewing the data in this manner yielded additional insight into the botnets and their respective capabilities. This document offers a summary of this technique as excerpted from the State of the Internet Q4 2014 Security Report. View this document and then get more details at http://bit.ly/1GsQasC