Vendor: BIND
July 25, 2023 · View on GitHub
Product: BIND
| Rules | Models | MITRE TTPs | Event Types | Parsers |
|---|---|---|---|---|
| 2 | 0 | 2 | 1 | 1 |
| Use-Case | Event Types/Parsers | MITRE TTP | Content |
|---|---|---|---|
| Malware | dns-query ↳ bind-dns-query-2 ↳ bind-dns-query-4 ↳ bind-dns-query-3 ↳ bind-dns-query | T1071.004 - Application Layer Protocol: DNS T1568.002 - Dynamic Resolution: Domain Generation Algorithms |
|
ATT&CK Matrix for Enterprise
| Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Application Layer Protocol: DNS Dynamic Resolution Dynamic Resolution: Domain Generation Algorithms Application Layer Protocol |