Differences

This shows you the differences between two versions of the page.

--- paloaltonetworks:troubleshooting:testing_panos [2023/01/21 16:40] – [DNS Security] bstafford
+++ paloaltonetworks:troubleshooting:testing_panos [2023/01/21 16:54] (current) – [DNS Security] bstafford
@@ Line 42: / Line 42: @@
-To find example malicious domains, look in the release notes of the active AV file on the firewall (Setup > Dynamic Updates). Search for ''New Spyware DNS C2 Signatures''.
+To find example malicious domains, look in the release notes of the active AV file on the firewall (Setup > Dynamic Updates). Search for <code>New Spyware DNS C2 Signatures</code>
+In built AV file based DNS malware detection:
+<code>( name-of-threatid contains 'Suspicious DNS Query (Compromised_DNS' )
+( name-of-threatid contains 'Suspicious DNS Query (generic' )</code>