DNS Query Request To OneLaunch Update Service — Detection Rule

Detects DNS query requests to "update.onelaunch.com". This domain is associated with the OneLaunch adware application. When the OneLaunch application is installed it will attempt to get updates from this domain.

Read the full analysis on IntelFusions