Detect Unusual DoT Communications

Diagram showing blue arrows moving left to right, indicating data flow. A dashed red line cuts through, suggesting a breach. A lock icon is present, implying security. The word upwind is in the top left corner.

We are excited to announce a new detection type, identifying unusual DoT activity. This detection notifies you of unusual DNS over TLS (Transport Layer Security) communication, often referred to as DoT, which could indicate attempts to blend malicious communications with regular encrypted web traffic to evade detection. DNS over TLS (DoT)  DNS is a crucial […]