Elastic low stable kql
Machine Learning Detected a DNS Request Predicted to be a DGA Domain
A supervised machine learning model has identified a DNS question name that is predicted to be the result of a Domain Generation Algorithm (DGA), which could indicate command and control network activity.
Detection Logic
ml_is_dga.malicious_prediction:1 and not dns.question.registered_domain:avsvmcloud.comField Validations
Loading…
Comments (0)
Loading comments...