attack.t1595.002 | Detection.FYI

DNS Query to External Service Interaction Domains

Nov 26, 2025 · attack.initial-access attack.t1190 attack.reconnaissance attack.t1595.002 ·
Share on:

Detects suspicious DNS queries to external service interaction domains often used for out-of-band interactions after successful RCE

Read More