Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Norbert Jaśniewicz (AlphaSOC)"

3,707Total
3,116Detection
451Emerging
137Hunting
Threat Huntmediumexperimental

Low Reputation Effective Top-Level Domain (eTLD)

Detects DNS queries to domains within known low reputation eTLDs. This rule uses AlphaSOC's threat intelligence data and is updated on a monthly basis.

dns
TA0011 · Command and ControlT1071.004 · DNSTA0001 · Initial Accessdetection.threat-hunting
Norbert Jaśniewicz (AlphaSOC)Mon Aug 04network