Powershell DNSExfiltration (d59d7842-9a21-4bc6-ba98-64bfe0091355)
DNSExfiltrator allows for transferring (exfiltrate) a file over a DNS request covert channel
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Exfiltration Over Alternative Protocol - T1048 (a19e86f8-1c0a-4fea-8407-23b73d615776) | Attack Pattern | Powershell DNSExfiltration (d59d7842-9a21-4bc6-ba98-64bfe0091355) | Sigma-Rules | 1 |