Product
This detection targets anomalous DNS activity where endpoints initiate connections to external AI service providers like Hugging Face or OpenAI, which may indicate data exfiltration or the use of AI APIs for command-and-control communication.