Skip to content

<<< Hide Navigation Hide TOC >>>

DNS Query To AzureWebsites.NET By Non-Browser Process (e043f529-8514-4205-8ab0-7f7d2927b400)

Detects a DNS query by a non browser process on the system to "azurewebsites.net". The latter was often used by threat actors as a malware hosting and exfiltration site.

Galaxy ColorsSigma-Rule...Attack Pat...
Rows: 1
Loading extensions...
Collapse filters
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.2

https://www.tablefilter.com/
©2015-2025 Max Guglielmi
?
Cluster A Galaxy A Cluster B Galaxy B Level
DNS Query To AzureWebsites.NET By Non-Browser Process (e043f529-8514-4205-8ab0-7f7d2927b400) Sigma-Rules Remote Access Software - T1219 (4061e78c-1284-44b4-9116-73e4ac3912f7) Attack Pattern 1