hightestEmerging Threat
DPRK Threat Actor - C2 Communication DNS Indicators
Detects DNS queries for C2 domains used by DPRK Threat actors.
windowsdns_query
2024-02-20
Browse detections by severity and log source, with YAML and sample events one click away.
Detects DNS queries for C2 domains used by DPRK Threat actors.