When Early DNS Signals Reveal What Attackers Do Next
Before attacks launch, they leave traces in the DNS. Use these signals to detect threats earlier.
Topic
SIEM / Threat Analytics / SOCNetwork Security / Patch ManagementAI & Quantum SecurityAwareness / Phishing / FraudCloud Security
When & Where
Details
Format:
Technology lecture
Language:
German
Session description
Speaker: Bernd Wilhelm
DNS traffic can reveal malicious infrastructure before a campaign is fully visible. Based on 2026 DNS Threat Intelligence observations, this session explores how threats appear, disappear, and resurface in real-world DNS traffic. Through examples of DGA-based and malware-related activity, we show how early DNS signals help security teams spot shifts in attacker behavior and anticipate emerging threats heading into 2027.
Sponsored by
it-sa 2026 | How DNS signals reveal what attackers are planning next.
