DNS Query to External Service Interaction Domains

SigmaHQ Detections@sigmaHQ

•updated 9 days ago•0•0•23

Detects suspicious DNS queries to external service interaction domains often used for out-of-band interactions after successful RCE