{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Antisyphon Training Anticasts","title":"Threat Hunting Malware Communication over DNS","html":"","width":"100%","height":180,"duration":5180,"description":"Are attackers hiding in your DNS traffic right now?🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.comJoin instructor Faan Rossouw for a free one-hour training on hunting malware that uses DNS as a covert communication channel.C2 frameworks, RATs, and backdoors frequently exploit DNS to stay hidden - sometimes for months. High-profile attacks like SolarWinds' Sunburst demonstrate just how devastating undetected DNS exfiltration can be.This Antisyphon Anti-Cast focuses on behavior-based threat hunting techniques that go beyond signatures to uncover suspicious DNS activity attackers think they've hidden.You'll learn how to:* Recognize network artifacts that DNS tunneling produces* Identify anomalies in DNS record types that signal malicious use* Leverage open-source tools like Zeek, RITA, and Sysmon to detect malware abusing DNS* Build detection strategies that make it very hard for DNS-based threats to remain hiddenIf you're ready to stop trusting DNS and start verifying it, this session will give you the practical skills to hunt what's lurking in your network.Chapters:Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.com","thumbnail_url":"https://img.transistorcdn.com/HDXnAmbV7tTWd3YmKfUnB-pmJJ9MLowmoA_tR95bY9Y/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8xZDlh/OGUwM2FhMmM5ZTQ5/YTA0MDI3ZjI0NGM5/ZmNlMS5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}