Rule Info
Name
DNS Query To Ufile.io - DNS Client
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects DNS queries to "ufile.io", which was seen abused by malware and threat actors as a method for data exfiltration
Date
2023-01-16 00:00:00
Modified
2023-09-18 00:00:00
Id
090ffaad-c01a-4879-850c-6d57da98452d
Tags
attack.exfiltration attack.t1567.002 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04
Scan your endpoints, forensic images or collected files with our portable scanner THOR