Query Tor Onion Address - DNS Client (8384bd26-bde6-4da9-8e5d-4174a7a47ca2)

Detects DNS resolution of an .onion address related to Tor routing networks

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Multi-hop Proxy - T1090.003 (a782ebe2-daba-42c7-bc82-e8e9d923162d)	Attack Pattern	Query Tor Onion Address - DNS Client (8384bd26-bde6-4da9-8e5d-4174a7a47ca2)	Sigma-Rules	1
Multi-hop Proxy - T1090.003 (a782ebe2-daba-42c7-bc82-e8e9d923162d)	Attack Pattern	Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea)	Attack Pattern	2