Suspicious DNS Query for IP Lookup Service APIs

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•2•0•3

Detects DNS queries for IP lookup services such as "api.ipify.org" originating from a non browser process.