All Detections

Suspicious Cobalt Strike DNS Beaconing - DNS Client

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202508

Detects a program that invoked suspicious DNS queries known from Cobalt Strike beacons

Sigma