search

alphasoc / nfr

A lightweight tool to score network traffic and flag anomalies
https://alphasoc.com
Other
122 stars 19 forks source link

Do not send FQDNs with a single label #74

Open tg opened 5 years ago

tg commented 5 years ago

We're seeing DNS traffic with FQDNs containing only a single label (xyzdiscoveryservice etc), which is of limited use on a backend side. We could drop them at a source.