medium10 pts · first answer countsnetwork-securitythreat-detection
Unusual DNS traffic
One workstation makes thousands of DNS TXT queries per hour to subdomains like a9f3k2...x7.data-sync-cdn.top, each with long random-looking labels. What does this most likely indicate?
Discussion 0
Join free to post in the discussion.
Related questions
- IDS vs IPSCybersecurity Analyst
- What makes a firewall stateful?Cybersecurity Analyst
- Read a Suricata ruleCybersecurity Analyst
- Spotting C2 beaconingCybersecurity Analyst
- Odd queries in Zeek dns.logCybersecurity Analyst
- Detecting KerberoastingCybersecurity Analyst
- Artefacts of PsExec lateral movementCybersecurity Analyst
- DNS logs went quietCybersecurity Analyst