Threat Hunting Anomalous DNS and LDAP Activity with Trend Rules

The recent Log4Shell (CVE-2021-44228) vulnerability is the impetus to creating this blog and discussing how you can use LogRhythm AI Engine (AIE) “Trend rules” to effectively detect anomalous behavior. This approach can likely be used in other technologies outside of…

The post Threat Hunting Anomalous DNS and LDAP Activity with Trend Rules appeared first on LogRhythm.

The post Threat Hunting Anomalous DNS and LDAP Activity with Trend Rules appeared first on Security Boulevard.

dns hunting ldap logrhythm labs rules threat threat hunting trend