Zeek DNS Log Analysis — C2 Beaconing Detection, DNS Tunneling Identification & Threat Intel Correlation

Hard CompTIA CySA+ cybersecurity drill: The SIEM triggered a DNS anomaly alert on workstation WKSTN-112 (10.10.5.112) — the alert flagged unusually high