net_dns_external_service_interaction_domains

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•28

Detects suspicious DNS queries to external service interaction domains often used for out-of-band interactions after successful RCE