Anti-Cast: Threat Hunting Malware Communication over DNS with Faan Rossouw

Are attackers hiding in your DNS traffic right now?

Join instructor Faan Rossouw for a free one-hour training on hunting malware that uses DNS as a covert communication channel.

C2 frameworks, RATs, and backdoors frequently exploit DNS to stay hidden – sometimes for months. High-profile attacks like SolarWinds’ Sunburst demonstrate just how devastating undetected DNS exfiltration can be.

This Antisyphon Anti-Cast focuses on behavior-based threat hunting techniques that go beyond signatures to uncover suspicious DNS activity attackers think they’ve hidden.

You’ll learn how to:

• Recognize network artifacts that DNS tunneling produces
• Identify anomalies in DNS record types that signal malicious use
• Leverage open-source tools like Zeek, RITA, and Sysmon to detect malware abusing DNS
• Build detection strategies that make it very hard for DNS-based threats to remain hidden

If you’re ready to stop trusting DNS and start verifying it, this session will give you the practical skills to hunt what’s lurking in your network.

Join us for PreShow Banter™ at 11:30 AM ET

Chat with your fellow attendees in the BHIS Discord server:
https://discord.gg/bhis 
in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!