dns from:malware-traffic-analysis.net - SERP Analysis

https://malware-traffic-analysis.net/

https://medium.com/%40enyel.salas84/malware-traffic-analysis-d9c582b862b2

https://www.malware-traffic-analysis.net/2023/08/01/index.html

https://infosecwriteups.com/malware-traffic-analysis-exercise-burnincandle-icedid-malware-67e78ef1d46c

https://ellisstannard.medium.com/malware-traffic-analysis-3-c4c47757e184

https://github.com/automayt/trafficanalysis/blob/master/exercises/2018-CTF-from-malware-traffic-analysis.net-2-of-2.pcap.md

https://otx.alienvault.com/indicator/domain/malware-traffic-analysis.net

https://www.qacafe.com/resources/malware-exercise-2017-10-21/

https://www.reddit.com/r/cybersecurity/comments/xnuj53/httpswwwmalwaretrafficanalysisnet/

https://www.youtube.com/watch?v=5j68c4A5qw8

https://any.run/cybersecurity-blog/network-traffic-analysis-in-linux/

https://d3fend.mitre.org/technique/d3f:DNSTrafficAnalysis/

https://www.netresec.com/?page=Blog&month=2021-04&post=Analysing-a-malware-PCAP-with-IcedID-and-Cobalt-Strike-traff

https://dl.acm.org/doi/10.1145/3338840.3355672

https://unit42.paloaltonetworks.com/profiling-detecting-malicious-dns-traffic/

https://www.qacafe.com/resources/malware-exercise-2017-11-21/

https://www.malware-traffic-analysis.net/about.html

https://cyberphor.com/chewing-on-malware-packet-captures

https://www.youtube.com/watch?v=KBjr1fdb3jY

https://ieeexplore.ieee.org/document/10224973/

https://www.semanticscholar.org/paper/DNS-Traffic-Analysis-for-Network-based-Malware-Hong/3ca6724ed173b8c9b691df5b5e4406e8f55df879

https://www.cubro.com/en/solutions/dns-traffic-analysis/

https://cyberpedia.reasonlabs.com/EN/malware%20traffic%20analysis.html

https://www.akamai.com/blog/security-research/a-deep-dive-on-malicious-dns-traffic

https://pcsxcetrasupport3.wordpress.com/2015/11/

https://insights.sei.cmu.edu/library/new-dns-traffic-analysis-techniques-to-identify-global-internet-threats/

https://github.com/neu5ron/TMInfosec/blob/master/Datasets/PCAPs.md

https://www.youtube.com/watch?v=6ebXr7nqr6o

http://www.diva-portal.org/smash/get/diva2:524298/FULLTEXT01.pdf

https://www.malware-traffic-analysis.net/2018/01/02/index.html

https://www.researchgate.net/publication/277833295_DNS_Traffic_Analysis_for_Network-based_Malware_Detection

https://www.sciencedirect.com/science/article/abs/pii/S0167404822003935

https://www.reddit.com/r/netsec/comments/c8mga8/first_malware_known_to_have_used_dns_over_https/

https://www.netresec.com/?page=Blog&month=2022-05&post=Emotet-C2-and-Spam-Traffic-Video

https://dev.to/mihika/2022-02-23-traffic-analysis-exercise-sunnystation-1alk

https://fidelissecurity.com/threatgeek/network-security/network-traffic-analysis-for-data-exfiltration-detection/

https://redcanary.com/blog/threat-detection/network-traffic-tunneling/

https://www.tracenetsolutions.com/2025/01/31/malware-traffic-analysis-how-is-it-carried-out-in-practice/

http://dataset.tlm.unavarra.es/

https://www.youtube.com/watch?v=T_41vAOHfZ4

https://mokourouma.hashnode.dev/analysing-the-gootloader-infection-palo-alto-threat-intelligence-using-wireshark-and-performing-dynamic-analysis

https://isc.sans.edu/diary/19655

https://www.sciencedirect.com/science/article/abs/pii/S0045790624003641

https://inl.gov/content/uploads/2023/07/Network-Traffic-Analysis-with-Malcolm.pdf

https://cyberpedia.reasonlabs.com/EN/dns%20traffic%20analysis.html

https://labex.io/tutorials/wireshark-uncover-suspicious-dns-queries-548854

https://ceur-ws.org/Vol-2086/AICS2017_paper_41.pdf

https://www.extrahop.com/resources/attacks/dns-tunneling

https://coeus.ece.gatech.edu/articles/CCS22.pdf

https://www.linkedin.com/advice/1/how-do-you-use-passive-dns-analysis-investigate

https://www.tcpwave.com/tcpwave-dns-traffic-analysis

https://thehackerwhorolls.home.blog/2019/11/11/2014-11-23-traffic-analysis-exercise/

https://www.blackhat.com/docs/us-14/materials/us-14-Mahjoub-Catching-Malware-En-Masse-DNS-And-IP-Style-WP.pdf

https://dl.acm.org/doi/10.1145/3545948.3545983

https://www.mdpi.com/2076-3417/12/1/155

https://www.infosecinstitute.com/resources/incident-response-resources/network-traffic-analysis-for-incident-response-ir-tls-decryption/

https://blog.securityonion.net/2023/08/quick-malware-analysis-2023-07-11.html

https://www.csoonline.com/article/574755/dns-data-shows-one-in-10-organizations-have-malware-traffic-on-their-networks.html

https://unit42.paloaltonetworks.com/wireshark-tutorial-examining-trickbot-infections/

https://en.wikipedia.org/wiki/DNS_analytics

https://www.cliffsnotes.com/study-notes/21068669

https://sites.cs.ucsb.edu/~chris/research/doc/ndss11_exposure.pdf

https://sparta.aerospace.org/v1.4/countermeasures/d3fend/techniques/D3-DNSTA

https://www.activecountermeasures.com/wp-content/uploads/2021/04/Network-Threat-Hunting-202104.pdf

https://www.ndss-symposium.org/ndss-paper/countering-malicious-processes-with-process-dns-association/

https://www.security.ntt/blog/trickbot-variant-communicating-over-dns

https://05t3.github.io/posts/MalwareTraffic-1/

https://www.cs.unb.ca/~alashkar/Data-sets.asp

https://www.netsurion.com/articles/monitoring-dns-traffic-for-security-threats

https://www.sceptr.com/solutions/dns-analysis

https://www.youtube.com/watch?v=Brx4cygfmg8

https://www.cloudns.net/blog/dns-tunneling-attack-what-is-it-and-how-to-protect-ourselves/

https://www.cynet.com/attack-techniques-hands-on/how-hackers-use-dns-tunneling-to-own-your-network/

https://cse.sc.edu/~huangct/CSCE715S17/07346821.pdf

https://www.infoblox.com/dns-security-resource-center/dns-security-issues-threats/dns-security-threats-malware/

https://www.distributed-systems.net/my-data/papers/2011.badgers.pdf

https://haircutfish.github.io/posts/Wireshark-Traffic-Analysis-Task-5-Tunneling-Traffic-DNS-and-ICMP-&-Task-6-Cleartext-Protocol-Analysis-FTP/

https://www.researchgate.net/publication/340359596_Analysis_of_Malware_Impact_on_Network_Traffic_using_Behavior-based_Detection_Technique

https://www.techscience.com/cmc/v80n3/57854/html

https://fuzzysecurity.com/tutorials/21.html

https://ieeexplore.ieee.org/document/9730600/

https://www.rapid7.com/blog/post/2018/01/24/how-to-detect-unauthorised-dns-servers/

https://www.akamai.com/glossary/what-is-dns-tunneling

https://www.linkedin.com/pulse/malware-traffic-analysis-series-1-mohab-gabber-irucf

https://any.run/cybersecurity-blog/how-to-analyze-malicious-network-traffic/

https://insights.sei.cmu.edu/documents/3660/2013_017_101_51275.pdf

https://www.geeksforgeeks.org/linux-unix/dnschef-penetration-testers-and-malware-analysts/

http://www.pphmj.com/article.php?act=art_download&art_id=11164

https://www.mdpi.com/1424-8220/25/4/993

https://www.infosecinstitute.com/resources/incident-response-resources/infosec-skills-network-traffic-analysis-for-ir-dns-protocol-with-wireshark/

http://www.thucsnet.com/wp-content/papers/guodong_access15.pdf

https://isc.sans.edu/diary/26566

https://www.jstage.jst.go.jp/article/ipsjjip/21/3/21_517/_article

https://svs.informatik.uni-hamburg.de/publications/2016/2016-04-15-Herrmann-DNS-Traffic-Analysis.pdf

https://www.cloud-response.com/2021/06/cyberdefenders-series-malware-traffic_8.html

https://telnetnetworks.ca/blog/dns-traffic-analysis-make-networks-more-secure/

https://sbseg2012.ppgia.pucpr.br/%40docs/SBSeg_DNS_11_2012.pdf

https://doras.dcu.ie/22426/

https://ceur-ws.org/Vol-2732/20200171.pdf