DNS Exfiltration Detection Rule Tuner for CrowdStrike Falcon LogScale
Tunes CrowdStrike Falcon LogScale queries to detect DNS-based data exfiltration techniques including high-entropy subdomain tunnelling, while suppressing CDN and legitimate update traffic false positives.