Detection rules › By event

Microsoft-Windows-DNS-Client

Event	Rules
Event ID 3008	6

Event ID 3008

6 detection rules reference this event. View event page.

Sigma (6)

DNS Query for Anonfiles.com Domain - DNS Client severity high T1567, T1567.002
DNS Query To MEGA Hosting Website - DNS Client severity medium T1567, T1567.002
DNS Query To Put.io - DNS Client severity medium
DNS Query To Ufile.io - DNS Client severity low T1567, T1567.002
Query Tor Onion Address - DNS Client severity high T1090, T1090.003
Suspicious Cobalt Strike DNS Beaconing - DNS Client severity critical T1071, T1071.004