New Blog Released on DNSWatch

07 Jul 2015

Today, Sven Schlueter, Head of our Assurance team in Germany, released a blog on 'DNSWatch - When a full DNS tunnel is just too much'.

The blog post provides insight into extracting data from a network and proving that it is possible in various different ways. One common and very well-known way to do this is to ex-filtrate data using DNS tunnels. Sven makes reference to previous engagements whereby we’ve looked into options about how to quickly identify if DNS tunneling is possible during a penetration test. 

He reviews several ideas and existing tools, but states that none of them are flexible enough to do what was needed. That's when he came up with the simple idea of DNSWatch. 

Click here to read the blog in full.

CHECK IT Health Check Service
Cyber Essentials
CESG Certified Service
First - Improving Security Together
BSI ISO 9001 FS 581360
BSI ISO 27001 IS 553326
PCI - Approved Scanning Vendor
NCSC CCSC - Assured Service Provider
ASSURE Cyber Supplier - CAA