{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Antisyphon Training Anticasts","title":"Threat Hunting Malware Communication over DNS","html":"","width":"100%","height":180,"duration":5169,"description":"Are attackers hiding in your DNS traffic right now?\n🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – \nhttps://poweredbybhis.com\n\nJoin instructor Faan Rossouw for a free one-hour training on hunting malware that uses DNS as a covert communication channel.\nC2 frameworks, RATs, and backdoors frequently exploit DNS to stay hidden - sometimes for months. High-profile attacks like SolarWinds' Sunburst demonstrate just how devastating undetected DNS exfiltration can be.\nThis Antisyphon Anti-Cast focuses on behavior-based threat hunting techniques that go beyond signatures to uncover suspicious DNS activity attackers think they've hidden.\nYou'll learn how to:\n* Recognize network artifacts that DNS tunneling produces\n* Identify anomalies in DNS record types that signal malicious use\n* Leverage open-source tools like Zeek, RITA, and Sysmon to detect malware abusing DNS\n* Build detection strategies that make it very hard for DNS-based threats to remain hidden\nIf you're ready to stop trusting DNS and start verifying it, this session will give you the practical skills to hunt what's lurking in your network.\nChapters:\nBrought to you by:\nBlack Hills Information Security \nhttps://www.blackhillsinfosec.com\n\nAntisyphon Training\nhttps://www.antisyphontraining.com/\n\nActive Countermeasures\nhttps://www.activecountermeasures.com\n\nWild West Hackin Fest\nhttps://wildwesthackinfest.com","thumbnail_url":"https://img.transistorcdn.com/HDXnAmbV7tTWd3YmKfUnB-pmJJ9MLowmoA_tR95bY9Y/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8xZDlh/OGUwM2FhMmM5ZTQ5/YTA0MDI3ZjI0NGM5/ZmNlMS5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}