...
SecOpsHostNameSubdomainLength | SecOpsHAFNIUMUserAgentsTargetingExchangeServers | SecOpsRevilKaseyaDomainConnection |
SecOpsTLDFromDomainNotInMozillaTLD | SecOpsTooLongDNSResponse | SecOpsLog4ShellVulnOverDomainsUnionTableConnections |
SecOpsLog4ShellVulnOverDomainsUnionTableConnectionsWithLookup | SecOpsHostDNSBasedCovertChannelIpv6Record | SecOpsDNSQueryToExternalSrvcInteractionDomains |
Prerequisites
To use this alert pack, you must have the following data sources available on your domain:
...