Suspicious Cobalt Strike DNS Beaconing - DNS Client

SigmaHQ Detections@sigmaHQ

•updated Nov 10, 2025•0•0•0

Detects a program that invoked suspicious DNS queries known from Cobalt Strike beacons