Power of DNS as an Added Defense Against Modern Attacks
summary
Covers how DNS-layer security (as used by Cisco Umbrella/OpenDNS) can provide early detection and defense against modern network attacks. Looks at tagging domains with feature metadata and examines how post‑exploitation frameworks use DNS as a covert command-and-control channel, with defensive tactics to stop those behaviors.
AI-written summary · about
chapters (12)
- 0:00Start
- 0:40What Is the Best Place To Gather Your Dns Data
- 0:50The Recursive Dns Resolver
- 6:43Iodine Dns Tunneling
- 11:48Quantum Ransomware
- 16:15Timeline of the Quantum Ransomware
- 17:38Kobold Strike
- 19:13Dns Beaconing
- 22:43Queries and Replies
- 24:40Txt Queries
- 34:04Sub Domain Data Encoding
- 39:54Protection for the Unknown
related talks
22mDNS is Under Attack - the Miscreant's Offensive Playbook with a Defensive Counter
32mDNS as Added Security Against Ransomware Attacks
34mPractical Steps for Reducing Exposure and Detecting Compromise
41mWhen Cybersecurity Is More Than Just Vulnerabilities
19mNames and Security
48mDNS ATT&CK 2020 - review of the most interesting techniques
26mMisuse of DNS, the Second Most Used Protocol
47mDNS On Fire