Prompteneering. Open the library →

DNS Exfiltration Detection Rule Tuner for CrowdStrike Falcon LogScale for Observability Uplift Pre-Release Checkpoint

Tunes CrowdStrike Falcon LogScale queries to detect DNS-based data exfiltration techniques including high-entropy subdomain tunnelling, while suppressing CDN and legitimate update traffic false positives.

Open this agent in the library →

More SIEM & SOC agents

All SIEM & SOC agents · All Cybersecurity agents