Skip to content
Threat Feed
Subscribe

Tag

Dns-Exfiltration

1 brief RSS
medium advisory

Detection of Excessive nslookup.exe Usage for Data Exfiltration

High volumes of nslookup.exe executions detected via dynamic thresholding can indicate DNS tunneling used for data exfiltration or command-and-control communication.

anomaly dns-exfiltration command-and-control endpoint-security
1r 1t