Network Hunt Manuals: DNS Traffic Analysis

The Network Hunt Manuals Vol 1 "DNS Traffic Analysis" is the first of an awesome series of intermediate to advanced deep dive traffic analysis techniques. This series seeks to be a no bull, no fluff guide that can be used by security analysts right away to improve their analysis. The information and techniques used in this book are the same techniques and information that's used by many of the top cyber security engineers & analysts in the world. Some of the topics included are: Ghole , CloudDuke, IsSpace, APT29(HammerToss), DNSBeacon, & Wekby(PsLoader) malware family Indicators of Compromise (IOCs); DNS Cache Poisoning, Eavesdropping, DNS Spoofing, Command & Control, Distributed Denial of Service (DDoS), & Data Exfil Attacks; DNS Protocol Breakdown, Amplification attacks using DNSSEC, Visualizing DNS Traffic, Analyzing DNS Traffic with BRO, Analyzing DNS Traffic with Python, Analyzing DNS Traffic with ChopShop, and much more!