What's Normal: New uses of DNS, Discovery of Designated Resolvers (DDR) - SANS Internet Storm Center
Tags
cmtmf-attack-pattern: Application Layer Protocol
attack-pattern: Data Direct Application Layer Protocol - T1437 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Standard Application Layer Protocol - T1071
Show in Graph
Common Information
Type Value
UUID 8907ce7d-86db-41d6-b902-33c2e48f2b1e
Fingerprint 2587431a259875c5
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 7, 2023, midnight
Added to db Nov. 7, 2023, 6:28 p.m.
Last updated Nov. 17, 2024, 8:57 a.m.
Headline Internet Storm Center
Title What's Normal: New uses of DNS, Discovery of Designated Resolvers (DDR) - SANS Internet Storm Center
Detected Hints/Tags/Attributes 23/2/6
Source URLs
Redirection Url
Details Source https://isc.sans.edu/diary/rss/30380
URL Provider
Details Provider Source level domain
Details sans.edu isc.sans.edu
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 142 ✔ SANS Internet Storm Center, InfoCON: green https://isc.sans.edu/rssfeed_full.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
resolver.arpa
Details Domain 33 
datatracker.ietf.org
Details Domain 52 
blog.cloudflare.com
Details Domain 71 
sans.edu
Details Url 1 
https://datatracker.ietf.org/doc/rfc9462
Details Url 1 
https://blog.cloudflare.com/announcing-ddr-support