Using splunk To Detect DNS Tunneling.pdf
11 MB
DNS tunneling is a method to bypass security controls and exfiltrate data from a targeted organization. Choose any endpoint on your organization's network, using nslookup, perform an A record lookup for www.sans.org. If it resolves with the site's IP address, that endpoint is susceptible to DNS...
#DNS
#DNS_Tunneling
#Detect
تیم سورین
#DNS
#DNS_Tunneling
#Detect
تیم سورین
👏2
Hypersec
https://www.openwall.com/lists/oss-security/2024/03/29/4
https://github.com/Neo23x0/signature-base/blob/master/yara/bkdr_xz_util_cve_2024_3094.yar
#CVE #detect #backdoor
تیم سورین
Please open Telegram to view this post
VIEW IN TELEGRAM
GitHub
signature-base/yara/bkdr_xz_util_cve_2024_3094.yar at master · Neo23x0/signature-base
YARA signature and IOC database for my scanners and tools - Neo23x0/signature-base