Detecting DNS Exfiltration With DNS Query Analysis
mukul975/Anthropic-Cybersecurity-Skills
Detect data exfiltration via DNS tunneling (tools like iodine, dnscat2, dns2tcp) by analyzing query entropy, subdomain length, query volume to single domains, TXT/CNAME/NULL record abuse, and…
