All Apps and Add-ons

How to calculate real dns domains feature and fit DGA app to detect abnormal ?


Hi I followed the setup guide of DGA app and after all is done, I still don't know how to use it with my real world traffic. I have dns data and I want to use DGA to detect if there is any botnet or other bad traffic in my dns traffic. So how to get started ?
The DGA app gives me a fabulous picture of creating machine learning model but never mention a word how to use it in practise. That's a pity. Hope someone have the answer and share it out.

Tags (1)
0 Karma

Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...