Domain Detective

API Reference

Class

DnsTunnelingAnalysis

Namespace DomainDetective
Assembly DomainDetective
Implements

Detects potential DNS tunneling activity from query logs.

Inheritance

  • Object
  • DnsTunnelingAnalysis

Usage

This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.

Returned or exposed by

Accepted by parameters

Constructors

Methods

public Void Analyze(String domainName, IEnumerable<String> logLines) #
Returns: Void

Parses DNS query log lines looking for tunneling patterns.

Parameters

domainName System.String requiredposition: 0
Domain to inspect.
logLines System.Collections.Generic.IEnumerable{System.String} requiredposition: 1
Lines from DNS query logs.

Properties

public String Subject { get; set; } #

Domain under analysis.

public List<DnsTunnelingAlert> Alerts { get; set; } #

Collection of detected issues.

public Int32 FrequencyThreshold { get; set; } #

Maximum queries allowed per FrequencyInterval.

public TimeSpan FrequencyInterval { get; set; } #

Time window for frequency detection.

public virtual List<Assessment> Assessments { get; } #

Gets the assessments value.

{{ include "footer" }}