DDI RULE 101
DESCRIPTION NAME:
DNS response resolves to dead IP address
CONFIDENCE LEVEL:
Informational
Low
Medium
High
OVERVIEW
This is the Trend Micro detection for malicious network packet
TECHNICAL DETAILS
Attack Phase: Command and Control Communication
Risk Type:
Threat Type: Suspicious Behavior
Confidence Level: Medium
DDI Default Rule Status: Enable
Event Class: Suspicious Traffic
Event Sub Class: DNS
APT Related: NO
SOLUTION
Network Content Inspection Pattern Version: 1.12641.00
Network Content Inspection Pattern Release Date: 10 Oct 2016
Did this description help? Tell us how we did.