Detection rules › By event

Microsoft-Windows-DNS-Client event 3008

6 detection rules reference this event. View event page.

Sigma (6)

DNS Query for Anonfiles.com Domain - DNS Client severity high T1567.002
DNS Query To MEGA Hosting Website - DNS Client severity medium T1567.002
DNS Query To Put.io - DNS Client severity medium
DNS Query To Ufile.io - DNS Client severity low T1567.002
Query Tor Onion Address - DNS Client severity high T1090.003
Suspicious Cobalt Strike DNS Beaconing - DNS Client severity critical T1071.004