Network Connection to Known Malicious Domains

Information hacker@Informationhacker

•updated Mar 5, 2026•9•0•91

This rule detects network connections from devices to a list of known malicious domains. These domains are often associated with command and control (C2) infrastructure or other malicious activities.