home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-analyzing-dns-logs-for-exfiltration-skill-md
debuggingtools
analyzing-dns-logs-for-exfiltration
Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume anomalies, and subdomain length detection in SIEM platforms. Use when SOC teams need to identify DNS-based threats that bypass traditional network security controls.
maintainer
mukul975
Обновлено 4/6/2026
Звёзды
4240
Форки
464
quick start
Installation and usage
Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume anomalies, and subdomain length detection in SIEM platforms. Use when SOC teams need to identify DNS-based threats that bypass traditional network security controls.
Установка
$ install --globalskills.sh
Использование
После установки вы можете использовать этот skill, выполнив следующую команду в терминале:
skills use analyzing-dns-logs-for-exfiltration