Intrusion PreventionDNSExfiltrator.Data.Exfiltration
Description
This indicates detection of an attempted data exfiltration using DNSExfiltrator.
DNSExfiltration supports DNS and DNS over HTTPS to perform Data Exfiltration.
Affected Products
All unprotected systems are vulnerable
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Monitor the traffic from the network for any suspicious activity.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-10-23 | 25.662 | Sig Added |
| 2020-10-05 | 16.937 | Sig Added |
| 2020-09-29 | 16.933 | Sig Added |
| 2020-08-31 | 15.914 | Default_action:pass:drop |
| 2020-08-19 | 15.908 |
References
https://github.com/Arno0x/DNSExfiltrator| ID | 49418 |
| Created | Aug 11, 2020 |
| Updated | Oct 23, 2023 |
| Risk |
|
| CVE ID | |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |