Title List hosts communicated with external domain
ID RA2113
Description List hosts communicated with an external domain
Author @atc_project
Creation Date 2020/05/06
Category Network
Stage RS0002: Identification
Requirements
  • DN_zeek_conn_log
  • DN_zeek_dns_log
  • DN_zeek_http_log
  • DN_dns_log
  • DN_proxy_log
  • DN_network_flow_log

Workflow

List hosts communicated with an external domain using the most efficient way.