New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DNS Logging: DNS Manipulation Intent #115

Open

shivaccuknox opened this issue May 21, 2024 · 0 comments

Labels

Intent tactic: initialAccess

Contributor

shivaccuknox commented May 21, 2024 •

edited

Loading

An adversary can piggyback user data within DNS requests, so that the DNS server retrieves the user data for further processing.

The detection technique involves logging the DNS requests

The adapter used is KubeArmor, and the API logging work [https://github.com//issues/112] item tracks the adapter/security engine work

This detection technique is not part of the MITRE FiGHT

shivaccuknox added this to NIMBUS

shivaccuknox converted this from a draft issue

shivaccuknox added Intent tactic: initialAccess labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment