Skip to content
Threat Feed

Tag

Public-Ip

1 brief RSS
high advisory

Suspicious Windows Processes Querying Public IP Discovery Services via DNS

Detection of suspicious Windows processes using DNS queries to public IP address lookup services can indicate reconnaissance activity or command and control preparation by threat actors.

Elastic Defend +2 discovery command-and-control windows public-ip
2r 2t 36i