LoFP
/
dns servers
Title
Tags
legitimate any requests may trigger this search, however it is unusual to see a large volume of them under typical circumstances. you may modify the threshold in the search to better suit your environment.
t1498
T1498.002
dns servers
splunk