DDI RULE 101
Publish Date: 02 août 2019
DESCRIPTION NAME:
DNS response resolves to dead IP address
CONFIDENCE LEVEL: MEDIUM
informational
Faible
Medium
Élevé
Overview
This is the Trend Micro detection for malicious network packet
Détails techniques
Attack Phase: Command and Control Communication
Risk Type:
Threat Type: Suspicious Behavior
Confidence Level: Medium
DDI Default Rule Status: Enable
Event Class: Suspicious Traffic
Event Sub Class: DNS
APT Related: NO
Solutions
Network Content Inspection Pattern Version: 1.12641.00
Network Content Inspection Pattern Release Date: 10 Oct 2016
Participez à notre enquête!