DNS C2 Beaconing
A host repeatedly queries the same DNS domain within a short period, which may indicate automated command-and-control beaconing.
Microsoft Sentinel (KQL)

A host repeatedly queries the same DNS domain within a short period, which may indicate automated command-and-control beaconing.

Already have an account?