Tag:threat hunting
All the articles with the tag "threat hunting".
IP-Lookup, Proxy-Judge, and Proxy-Pool Destinations to Hunt For in Your Logs
Known IP-lookup, proxy-judge, and proxy-pool destinations to hunt for in DNS and egress logs, plus the ?Z<id>Q1 and ?_hp_chain fingerprints that mark proxy-testing harnesses.