hightestEmerging Threat
DPRK Threat Actor - C2 Communication DNS Indicators
Detects DNS queries for C2 domains used by DPRK Threat actors.
windowsdns_query
2024-02-20
DPRK is tracked here as a threat actor, intrusion set, or campaign with 1 Sigma detection spanning 2024. Coverage centers on windows / dns_query.
Detects DNS queries for C2 domains used by DPRK Threat actors.