A controlled DNS tunneling investigation using harmless synthetic query patterns to practice Splunk detection, DNS behavior analysis, SOC validation, AI assistance, and human-approved containment.
splunk incident-response threat-hunting siem soc network-security dns-tunneling command-and-control blue-team mitre-attack threat-detection dns-analysis security-monitoring detection-engineering dns-security cybersecurity-lab ai-assisted-security dns-c2 t1071-004
-
Updated
Sep 4, 2026 - Shell