Wen Ray
@wenray0 followers4 downloads11 copies4 likes162 views
1 detection
Filters
Last updated
All Time
Detection languages
1
Categories
1
Platforms
1
MITRE Techniques
1
1
1
1
Detects network connections using DNS over TLS (DoT) on port 853 or DNS over HTTPS (DoH) to known public resolvers from non-browser processes. This activity can indicate an attempt to bypass network security controls and monitoring by hiding DNS queries within encrypted traffic.
