rule:
meta:
name: reference kornet DNS server
namespace: communication/dns
authors:
- william.ballenthin@mandiant.com
scopes:
static: function
dynamic: thread
references:
- https://whatismyipaddress.com/ip/168.126.63.1
# examples:
# - ab57d3c179355bf2bcdb7935483d84d4
features:
- or:
- string: "168.126.63.1"
description: kns.kornet.net
last edited: 2023-11-24 10:34:28