Potential DGA Detection
The rule detects hosts that communicate with multiple distinct domains within a short timeframe where each domain contains a subdomain portion of at least 8 alphanumeric characters, matching characteristic DGA patterns, and also includes a Shannon entropy filter.
YARA-L
