Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

Uncovering Fast Flux with Sentinel Threat Intelligence

Steven Lim@KQLWizard

•updated Jul 1, 2025•4•0•43

KQL Query

Microsoft Sentinel (KQL)

Tags

T1568.001 - Fast Flux DNS TA0011 - Command and Control T1590.002 - DNS T1071.004 - DNS T1584.002 - DNS Server T1041 - Exfiltration Over C2 Channel T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol T1048.001 - Exfiltration Over Symmetric Encrypted Non-C2 Protocol TA0043 - Reconnaissance TA0042 - Resource Development TA0010 - Exfiltration DNS Query Network Connection Outbound Windows Azure Sentinel Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?