TGI HUNT Dynamic DNS Domain in SNI

SID: 2610556Rev: 0Enabled17 views
Filehunting.rules
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationbad-unknown
alert tls any any -> any any (msg:"TGI HUNT Dynamic DNS Domain in SNI"; flow:established,to_server; tls_sni; content:"duckdns.org"; endswith; classtype:bad-unknown; sid:2610556;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!