What is DNS tunneling and how do you prevent it?

extrahop.com

11 pointscws6 comments

This is an advertisement. Nothing more.

OP here. Sorry that it felt that way to you, and curious why? Because it is from a corporate blog? The material answers the question posited in the title, IMO, but curious why it came off as an Ad to you. Mind sharing?

Well I guess because of this part:

>ExtraHop Reveal(x) automatically detects unusual changes in DNS traffic based on device behavior over time, surfacing queries that should be investigated. A defender can investigate the DNS query from the detection card.

While it does answer the question it also presents one of the solutions as something it has stake in. Imagine a McDonalds blog post about ways to stop hunger:

How to stop hunger! Hunger is when your body wants food. Here are 3 ways of stopping that feeling:

1) Cook some food and eat it

2) Go out to eat

3) Go to McDonalds and have a Big Mac™

More like: "What is hunger?", where your last step is the only proposed solution.

The article does contains interesting information, but then seeing that it is only an ad is a bit disappointing.

figured as much :/

What made it seem that way? I feel like the post provides a solid answer to the question asked in the title. Does it not?

Reply on news.ycombinator.com