cyber-analyzing-dns-logs-for-exfiltration

name	cyber-analyzing-dns-logs-for-exfiltration
description	Analyzes DNS query logs to detect data exfiltration via DNS tunneling, DGA domain communication, and covert C2 channels using entropy analysis, query volume anomalies, and subdomain length detection in SIEM platforms. Use when SOC teams need to identify DNS-based threats that bypass traditional network security controls.
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-analyzing-dns-logs-for-exfiltration/SKILL.md

Authoritative source SHA-256: d24cdd46e3b721898d098cf647593e511c5a38d5b8baadde5dc91940e47c93f7

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-analyzing-dns-logs-for-exfiltration and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.