Unusual DNS Query Volume Detection

Subash Ghimire@iamsubashg

•updated Aug 20, 2025•4•0•70

This rule identifies unusual DNS query volumes by monitoring and counting DNS queries over a set threshold in the past day.