Using DNS to Identify, Mitigate, and Prevent Infections

Most of our environments demand that we support almost every type of end-user device available (tablets, laptops, phones, Internet TVs, and more). One of the few commonalities among all these devices is their use of DNS. Through the use of passive DNS logging and DNS sinkholes we have another tool at our disposal to help identify compromises on any device and, in many cases, to even stop drive-by infections from ever occurring.