1
Cyber Threats Iocs And Attack Methodology
medium
A SOC analyst is reviewing DNS logs and observes a workstation issuing hundreds of unique subdomain queries under the domain telemetry-sync[.]net, each returning an NXDOMAIN response within seconds. No matching HTTP traffic appears in the proxy logs. Which attack technique is most consistent with this pattern?