nfragile

Verified record · from the answer index

analyzing-dns-logs-for-exfiltration

skilltested · static-verifiedscore 42/100signed passport ✓525 uses

Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume anomalies, and subdomain length detection in SIEM platforms. Use when SOC teams nee

Declared tools (1)

analyzing-dns-logs-for-exfiltration

skill:mukul975/anthropic-cybersecurity-skills/analyzing-dns-logs-for-exfiltration · published by mukul975 · source repository