1-39866 - INDICATOR-COMPROMISE Suspicious .ml dns query
Rule |
1-39867 - INDICATOR-COMPROMISE Suspicious .tk dns query
Rule |
1-27721 - INDICATOR-COMPROMISE Suspicious .su dns query
Rule |
1-28039 - INDICATOR-COMPROMISE Suspicious .pw dns query
Rule |
1-28190 - INDICATOR-COMPROMISE Suspicious .cc dns query
Rule |
1-15167 - INDICATOR-COMPROMISE Suspicious .cn dns query
Rule |
1-15168 - INDICATOR-COMPROMISE Suspicious .ru dns query
Rule |
1-48668 - INDICATOR-COMPROMISE suspicious .o dns A query
Rule |
1-48672 - INDICATOR-COMPROMISE suspicious .oz dns A query
Rule |
1-19020 - INDICATOR-COMPROMISE Suspicious .cc dns query
Rule |
1-28284 - INDICATOR-COMPROMISE Suspicious .nl.ai dns query
Rule |
1-48660 - INDICATOR-COMPROMISE suspicious .indy dns query
Rule |
1-43687 - INDICATOR-COMPROMISE Suspicious .top dns query
Rule |
1-44076 - INDICATOR-COMPROMISE Suspicious .trade dns query
Rule |
1-44077 - INDICATOR-COMPROMISE Suspicious .win dns query
Rule |
1-48648 - INDICATOR-COMPROMISE suspicious .bbs dns query
Rule |
1-48650 - INDICATOR-COMPROMISE suspicious .chan dns query
Rule |
1-48652 - INDICATOR-COMPROMISE suspicious .cyb dns query
Rule |
1-48654 - INDICATOR-COMPROMISE suspicious .dyn dns query
Rule |
1-48656 - INDICATOR-COMPROMISE suspicious .geek dns query
Rule |
1-48658 - INDICATOR-COMPROMISE suspicious .gopher dns query
Rule |
1-48662 - INDICATOR-COMPROMISE suspicious .libre dns query
Rule |
1-48664 - INDICATOR-COMPROMISE suspicious .neo dns query
Rule |
1-48666 - INDICATOR-COMPROMISE suspicious .null dns query
Rule |
1-48667 - INDICATOR-COMPROMISE suspicious .o tcp dns A query
Rule |
1-48670 - INDICATOR-COMPROMISE suspicious .oss dns query
Rule |
1-48671 - INDICATOR-COMPROMISE suspicious .oz tcp dns A query
Rule |
1-48674 - INDICATOR-COMPROMISE suspicious .parody dns query
Rule |
1-48676 - INDICATOR-COMPROMISE suspicious .pirate dns query
Rule |
1-48678 - INDICATOR-COMPROMISE suspicious .free dns query
Rule |