Look beyond raw packet capture and metatdata!
This command can be used to decode International Domain Names, (xn--*), into their original language and attempt to detect character sets used in encoding. Used primarily for translating internationalized domain names for native speaking countries from network capture and highlighting of potential homoglyph attacks.
Usage:
1) search | punydecode field=[field]
2) search | punydecode field=[field] [detection]
3) search | punydecode
1) Output will include [punydecoded] field with your decoded punycode addresses.
2) Output with include [punydecoded] field as well as [detection] field when detection option is included will now display narrow mode unicode character sets recognized in International Domain Name identified
3) Output will be a command error message that shows proper syntax options.