Detection rules › By catalog entry

Microsoft-Windows-DNS-Client

Catalog entry	Rules
Event ID 3008	6

Event ID 3008

6 detection rules reference this catalog entry. View catalog entry.

Sigma (6)

DNS Query for Anonfiles.com Domain - DNS Client severity high T1567,T1567.002
DNS Query To MEGA Hosting Website - DNS Client severity medium T1567,T1567.002
DNS Query To Put.io - DNS Client severity medium
DNS Query To Ufile.io - DNS Client severity low T1567,T1567.002
Query Tor Onion Address - DNS Client severity high T1090,T1090.003
Suspicious Cobalt Strike DNS Beaconing - DNS Client severity critical T1071,T1071.004

Back to all Microsoft-Windows-DNS-Client catalog entries