attack.t1090.003 | Detection.FYI

DNS Query Tor .Onion Address - Sysmon

Aug 12, 2024 · attack.command-and-control attack.t1090.003 ·
Share on:

Detects DNS queries to an ".onion" address related to Tor routing networks

Read More
Query Tor Onion Address - DNS Client

Aug 12, 2024 · attack.command-and-control attack.t1090.003 ·
Share on:

Detects DNS resolution of an .onion address related to Tor routing networks

Read More
Tor Client/Browser Execution

Aug 12, 2024 · attack.command-and-control attack.t1090.003 ·
Share on:

Detects the use of Tor or Tor-Browser to connect to onion routing networks

Read More