DNS Query to External Service Interaction Domains — Detection Rule
Detects suspicious DNS queries to external service interaction domains often used for out-of-band interactions after successful RCE
Detects suspicious DNS queries to external service interaction domains often used for out-of-band interactions after successful RCE