drop pcap or dns log · high-entropy subdomains · long query names · dns c2 and exfil channels · export csv · runs locally
drop pcap/pcapng or dns log