SEKOIA.IO Rules low stable sigma

Dynamic DNS Contacted

Detect communication with dynamic dns domain. This kind of domain is often used by attackers. This rule can trigger false positive in non-controlled environment because dynamic dns is not always malicious.

View Source

Detection Logic

selection:
  sekoiaio.any_tag
| contains: dynamic-dns
condition: selection

Field Validations

Loading…

Comments (0)

Loading comments...