Elastic low stable kql

Machine Learning Detected a DNS Request With a High DGA Probability Score

A supervised machine learning model has identified a DNS question name with a high probability of sourcing from a Domain Generation Algorithm (DGA), which could indicate command and control network activity.

View Source

Detection Logic

ml_is_dga.malicious_probability > 0.98

Field Validations

Loading…

Comments (0)

Loading comments...