NEW! Automatically Export DNS Data for Analysis and Compliance

by Kory Underdown on Jun 7, 2022 12:00:00 AM

‍

More than 70% of cyberattacks involve the Domain Name System (DNS) layer.

Additionally, the ability to ingest, correlate, search, and action data from across the entire enterprise and cloud attack surface is becoming increasingly more important.

‍

Announcing DNSFilter’s newest feature: Data Export

‍

Data Export automates the process of exporting query log data from DNSFilter’s AI-powered DNS security solution to Splunk and Amazon S3 buckets. S3 can then be used as an intermediary for SIEM and SOAR products of your choice.

With Data Export, data is exported in near real time and analyzed alongside additional security events and data sources to provide visibility across enterprise environments and respond to threats.

‍

Benefits of Data Export include:

‍

Automated export: Security teams no longer need to manually export DNS layer data into a security monitoring solution. More than 25 categories of query log data including domain name, request address, server address, and more are automatically exported, saving significant time and resources.
Long-term search: Finding hidden threats requires the ability to continuously run new analysis on historical data. Data Export allows security teams to retain and analyze historical DNSFilter data in their security monitoring solution.
Single pane of glass: DNSFilter data can be aggregated alongside all endpoint, cloud workload, and additional enterprise data sources to correlate events and take action in a single location.

‍

Data Export is available to all Basic, Pro, & Enterprise plans for $.25 per user, per month. For more information on how to use Data Export in your organization, join us for the Data Export 101 webinar.

‍

Topics: Product & Features

Risky Apps for Business: Top Malware and Phishing Threats

Not all apps are created equal. Some introduce serious risks for phishing, malware, or data breaches, especially when they’re adopted by employees without IT approval. And while blocking a website at the domain can prevent unauthorized access on your network, many applications have hundreds or thousands of domains—simply blocking the main domain might not be enough to prevent access.

What DNS Needs To Be When It Grows Up: Protective

DNS—short for Domain Name System—has quietly operated behind the scenes as the backbone of how devices find one another on the Internet. But as threats evolve, DNS is no longer just the plumbing: It has to become your first line of defense. That’s the core message from our recent webinar, What DNS Needs to Be When It Grows Up.

From Just Monitoring to Actionable Insights with SIEM and SOC

You're facing two critical issues. First, your clients feel insecure due to lack of comprehensive visibility into their network environments. Second, your pitches for cybersecurity services often fall flat because they lack compelling, data-driven insights. These challenges are roadblocks but can be turned into opportunities with SIEM and SOC solutions.