DNS Query To Devtunnels Domain

SigmaHQ Detections@sigmaHQ

•updated Aug 14, 2025•0•0•0

Detects DNS query requests to Devtunnels domains. Attackers can abuse that feature to establish a reverse shell or persistence on a machine.