Powershell DNSExfiltration — Detection Rule

DNSExfiltrator allows for transferring (exfiltrate) a file over a DNS request covert channel

Read the full analysis on IntelFusions