1 rule found for "Matt Kelly (list of domains)"
Detects suspicious DNS queries to external service interaction domains often used for out-of-band interactions after successful RCE