Using splunk To Detect DNS Tunneling.pdf
11 MB
DNS tunneling is a method to bypass security controls and exfiltrate data from a targeted organization. Choose any endpoint on your organization's network, using nslookup, perform an A record lookup for www.sans.org. If it resolves with the site's IP address, that endpoint is susceptible to DNS...
#DNS
#DNS_Tunneling
#Detect
@Engineer_Computer
#DNS
#DNS_Tunneling
#Detect
@Engineer_Computer