Skip to content
Threat Feed
Subscribe

Tag

Dynamic-Dns

1 brief RSS
medium advisory

Detection of Internal Host Connections to Dynamic DNS Providers

This detection identifies DNS queries from internal hosts to known dynamic domain providers, a technique frequently used by attackers to maintain flexible command-and-control infrastructure and host malicious payloads.

command-and-control dns-monitoring network-security dynamic-dns threat-hunting
1r 1t