Kali365 Panel DNS Lookups
Detects DNS resolutions for domains associated with the Kali365 affiliate panel, which is heavily abused in device code phishing campaigns. This rule specifically identifies DNS queries to known malicious domains used by this PhaaS (Phishing-as-a-Service) infrastructure.
Microsoft Sentinel (KQL)
