Threat Hunting C2 - DNS TXT Record Abuse w/ Faan Rossouw скачать в хорошем качестве

Threat Hunting C2 - DNS TXT Record Abuse w/ Faan Rossouw

Could DNS traffic be hiding active C2 in your environment right now? Join us for a free monthly one-hour training session on command & controls and malicious traffic with Faan Rossouw (Active Countermeasures) and learn a stealthy C2 technique that bypasses common DNS tunneling detections and how to catch it. What you’ll learn: How attackers abuse DNS TXT records to deliver payloads (server to agent) Why low-subdomain-count DNS C2 slips past default thresholds The behavioral signals defenders can reliably hunt for A real-world case study: Joker Screenmate malware (DomainTools, July 2025) Faan will walk through a full threat hunt, so you'll leave with practical skills you can apply immediately, including one Zeek command you can run today to find TXT record abuse in your logs. See more Command & Control webcasts at    / activecountermeasures   Chat with your fellow attendees in the BHIS Discord server:   / discord   in the #🔴live-chat channel