DDI RULE 39
Data de publicação: 02 agosto 2019
DESCRIPTION NAME:
Host DNS query to a non-trusted DNS server
CONFIDENCE LEVEL: MEDIUM
Informativo
Baixo
Medium
Alto
Visão geral
This is the Trend Micro detection for malicious network packet
Detalhes técnicos
Risk Type: OTHERS
(Note: OTHERS can be network connections related to hacking attempts, exploits, connections done by grayware, or suspicious traffic.)
Threat Type: Suspicious Behavior
Confidence Level: Medium
DDI Default Rule Status: Disable
Event Class: Suspicious Traffic
Event Sub Class: DNS
APT Related: NO
Solução
Network Content Correlation Pattern Version: 1.11947.00
Network Content Correlation Pattern Release Date: 31 Oct 2013
Participe da nossa pesquisa!