Elastic low stable kql
Machine Learning Detected a DNS Request With a High DGA Probability Score
A supervised machine learning model has identified a DNS question name with a high probability of sourcing from a Domain Generation Algorithm (DGA), which could indicate command and control network activity.
Detection Logic
ml_is_dga.malicious_probability > 0.98 Field Validations
Loading…
Comments (0)
Loading comments...