home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-hunting-for-dns-tunneling-with-zeek-skill-md
debuggingtools

hunting-for-dns-tunneling-with-zeek

Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.

mukul975
maintainer
mukul975
Обновлено 4/6/2026
Звёзды
4240
Форки
464
quick start

Installation and usage

Detect DNS tunneling and data exfiltration by analyzing Zeek dns.log for high-entropy subdomain queries, excessive query volume, long query lengths, and unusual DNS record types indicating covert channel communication.

Установка
$ install --globalskills.sh
Использование

После установки вы можете использовать этот skill, выполнив следующую команду в терминале:

skills use hunting-for-dns-tunneling-with-zeek