domain name generation

From ema
Jump to navigation Jump to search
EMA ID: ema-1244
Description: The 'domain name generation' Behavior generates the domain name of the command and control server to which it connects. The algorithm can be complicated in more advanced bots; understanding the details so that names can be predicted can be useful in mitigation and response.

Associated Capabilities/Subcapabilities: Capability.png Command and Control

Associated With domain name generation
No results