How to Recognize Malicious DNS with Free Network Monitoring Tools

Logo
Presented by

Randy Franklin Smith (UWS), Rob McGovern (LogRhythm) and Erika Noerenberg

About this talk

DNS is woven into the fabric of both the Internet and corporate intranets. It works so well that you might even forget it exists—until it is used against you. Hackers are using DNS to find Command and control (C2) servers, control compromised systems, and exfiltrate your data. In this free training webinar, a group of security experts from LogRhythm and Ultimate Windows Security team up to show you how to spot threatening DNS activity with LogRhythm NetMon Freemium. You’ll learn about the malicious use of DNS and how to detect: - Domain-generation-algorithm (DGA) queries - C2 data tunneled through DNS - Data exfiltration via tunneled DNS Watch now to learn how to stop hackers from exploiting DNS to infiltrate your network.
Related topics:

More from this channel

Upcoming talks (1)
On-demand talks (257)
Subscribers (76931)
LogRhythm helps security teams stop breaches by turning disconnected data and signals into trustworthy insights. From connecting the dots across diverse log and threat intelligence sources to using sophisticated machine learning that spots suspicious anomalies in network traffic and user behavior, LogRhythm accurately pinpoints cyberthreats and empowers professionals to respond with speed and efficiency. With cloud-native and self-hosted deployment flexibility, out-of-the-box integrations, and advisory services, LogRhythm makes it easy to realize value quickly and adapt to an ever-evolving threat landscape. Together, LogRhythm and our customers confidently monitor, detect, investigate, and respond to cyberattacks. Learn more at logrhythm.com