Category: Threat Hunting
Everything filed under Threat Hunting.
IP-Lookup, Proxy-Judge, and Proxy-Pool Destinations to Hunt For in Your Logs
Known IP-lookup, proxy-judge, and proxy-pool destinations to hunt for in DNS and egress logs, plus the ?Z<id>Q1 and ?_hp_chain fingerprints that mark proxy-testing harnesses.