We have added a DGA detection package to the Integrations app in Kibana. In a single click, you can install and start using the DGA model and associated assets, including ingest pipeline configurations, anomaly detection jobs, and detection rules.

Step 1: Installing the package assets

Step 2: Enriching your data

Step 3: Running anomaly detection

Step 4: Enabling the rules

Detect domain generation algorithm (DGA) activity with new Kibana integration

We added a Living off the land (LotL) detection package to the Integrations app in Kibana. In a single click, you can install and start using the ProblemChild model and associated assets including anomaly detection configurations and detection rules.

Author

Melissa Alvarez

Articles

Detect domain generation algorithm (DGA) activity with new Kibana integration

Detecting Living-off-the-land attacks with new Elastic Integration