homepage
Open menu
Contact Sales

Digging for Gold: Examining DNS Logs on Windows Clients

Investigators can examine Domain Name Service (DNS) queries to find potentially compromised hosts by searching for queries that are unusual or to known malicious domains. Once the investigator identifies the compromised host, they must then locate the process that is generating the DNS queries. The...
By
Amanda Draeger
May 22, 2019
Download

All papers are copyrighted. No re-posting of papers is permitted

470x382_Generic_Whitepaper.jpg

Related Content

Blog
DFIR - Blog - Women In Russian-speaking Cybercrime_340 x 340.jpg
Digital Forensics, Incident Response & Threat Hunting
Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground?
Women’s roles in Russian-speaking cybercrime, though less visible than men’s, are evolving and significant.
Anastasia Sentsova
Anastasia Sentsova
read more
Blog
DFIR - Blog - New FOR518- Mac and iOS Forensic Analysis Poster Update_340 x 340.jpg
Digital Forensics, Incident Response & Threat Hunting
New FOR518: Mac and iOS Forensic Analysis Poster Update
The latest updates to the Digital Forensics and Incident Response Poster bring a wealth of new sections and enhancements.
Kathryn_Hedley_370x370.png
Kathryn Hedley
read more
Blog
Top_10_SANS_Summits_Talks_of_2021.png
Cybersecurity Insights, Digital Forensics, Incident Response & Threat Hunting, Cyber Defense, Cloud Security, Open-Source Intelligence (OSINT), Cybersecurity Leadership, Security Awareness, Artificial Intelligence (AI)
Top 15 SANS Summit Talks of 2023
This year, SANS hosted 16 Summits with 209 talks. Here were the top-rated talks of the year.
370x370-person-placeholder.png
Alison Kim
read more