ATT&CK technique
View on MITRE ATT&CK →
T1568.002
Domain Generation Algorithms
Command and Control
11 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Connection to Commonly Abused Web Services | production | 2026-10-19 |
| elastic | Halfbaked Command and Control Beacon | production | 2026-10-06 |
| elastic | Cobalt Strike Command and Control Beacon | production | 2026-10-06 |
| elastic | Possible FIN7 DGA Command and Control Behavior | production | 2026-10-06 |
| elastic | Unusual DNS Request to Suspicious Top Level Domain | production | 2026-09-18 |
| elastic | Machine Learning Detected a DNS Request Predicted to be a DGA Domain | production | 2026-09-18 |
| elastic | Machine Learning Detected DGA activity using a known SUNBURST DNS domain | production | 2026-09-18 |
| elastic | Potential DGA Activity | production | 2026-09-18 |
| elastic | Machine Learning Detected a DNS Request With a High DGA Probability Score | production | 2026-09-18 |
| sigma | Communication To Ngrok Tunneling Service Initiated | test | 2024-02-02 |
| sigma | Communication To Ngrok Tunneling Service - Linux | test | 2022-11-03 |