Skip to content
Threat Feed
Subscribe

Tag

Dns-Anomaly

1 brief RSS
low advisory

Unusual DNS Activity Detected by Machine Learning

An Elastic machine learning rule detects rare and unusual DNS queries that indicate potential malicious network activity, including initial access via phishing or malicious documents, persistence, command-and-control (C2) communication, or data exfiltration attempts by adversaries.

command-and-control exfiltration initial-access machine-learning network-traffic dns-anomaly elastic-security endpoint-detection
4t