Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

DNS Exfiltration and Tunneling Tools Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Well-known DNS Exfiltration tools execution

Sigma

Tags

TA0010 - Exfiltration T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol TA0011 - Command and Control T1071.004 - DNS T1132.001 - Standard Encoding Process Creation Windows Windows Sysmon Windows Eventlog Securityattack.exfiltrationattack.t1048.001attack.command-and-controlattack.t1071.004attack.t1132.001

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?