This website uses cookies
We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
Consent Selection
Details
  • Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
    • Learn more about this provideropens in a new window
      CookieConsentStores the user's cookie consent state for the current domain
      Maximum Storage Duration: 1 yearType: HTTP Cookie
    • Learn more about this provideropens in a new window

      Some of the data collected by this provider is for the purposes of personalization and measuring advertising effectiveness. The provider may use the IP Addresses for ads measurement and ads personalization.

      rc::aThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      rc::cThis cookie is used to distinguish between humans and bots.
      Maximum Storage Duration: SessionType: HTML Local Storage
    • Learn more about this provideropens in a new window
      __cf_bmThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
      bcookieUsed in order to detect spam and improve the website's security.
      Maximum Storage Duration: 1 yearType: HTTP Cookie
      li_gcStores the user's cookie consent state for the current domain
      Maximum Storage Duration: 180 daysType: HTTP Cookie
  • Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
    • Learn more about this provideropens in a new window
      lidcRegisters which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
  • Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
    • Learn more about this provideropens in a new window

      Some of the data collected by this provider is for the purposes of personalization and measuring advertising effectiveness. The provider may use the IP Addresses for ads measurement and ads personalization.

      _gaUsed to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels.
      Maximum Storage Duration: 2 yearsType: HTTP Cookie
      _ga_#Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels.
      Maximum Storage Duration: 2 yearsType: HTTP Cookie
    • _gat [x2]Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
  • Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
    • Learn more about this provideropens in a new window

      Some of the data collected by this provider is for the purposes of personalization and measuring advertising effectiveness. The provider may use the IP Addresses for ads measurement and ads personalization.

      _gidUsed to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
    • Learn more about this provideropens in a new window
      __Secure-ROLLOUT_TOKENUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: 180 daysType: HTTP Cookie
      __Secure-YECStores the user's video player preferences using embedded YouTube video
      Maximum Storage Duration: SessionType: HTTP Cookie
      __Secure-YNIDUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: 180 daysType: HTTP Cookie
      LAST_RESULT_ENTRY_KEYUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: SessionType: HTTP Cookie
      LogsDatabaseV2:V#||LogsRequestsStoreUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: IndexedDB
      TESTCOOKIESENABLEDUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: 1 dayType: HTTP Cookie
      VISITOR_INFO1_LIVETries to estimate the users' bandwidth on pages with integrated YouTube videos.
      Maximum Storage Duration: 180 daysType: HTTP Cookie
      YSCRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.
      Maximum Storage Duration: SessionType: HTTP Cookie
      yt-icons-last-purgedNecessary for the implementation and functionality of YouTube video-content on the website.
      Maximum Storage Duration: PersistentType: HTML Local Storage
      YtIdbMeta#databasesUsed to track user’s interaction with embedded content.
      Maximum Storage Duration: PersistentType: IndexedDB
  • Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

    • We do not use cookies of this type.

Cookie declaration last updated on 8/14/26 by Cookiebot
[#IABV2_TITLE#]
[#IABV2_BODY_INTRO#]
[#IABV2_BODY_LEGITIMATE_INTEREST_INTRO#]
[#IABV2_BODY_PREFERENCE_INTRO#]
[#IABV2_BODY_PURPOSES_INTRO#]
[#IABV2_BODY_PURPOSES#]
[#IABV2_BODY_FEATURES_INTRO#]
[#IABV2_BODY_FEATURES#]
[#IABV2_BODY_PARTNERS_INTRO#]
[#IABV2_BODY_PARTNERS#]
About
Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

Please state your consent ID and date when you contact us regarding your consent.
Home

White Paper

TAXONOMY OF SolarWinds SUNBURST DNS Abuse Tactics

TAXONOMY OF SolarWinds SUNBURST DNS Abuse Tactics

TAXONOMY OF SolarWinds SUNBURST DNS Abuse Tactics

ExtraHop
Pages 14 Pages

The SUNBURST attack used enterprise DNS weaknesses to hide its command‑and‑control traffic, making detection extremely difficult. Because DNS generates massive volumes of noisy queries, malicious activity can blend in unnoticed. SUNBURST relied on a rare domain generation algorithm to exfiltrate data and communicate with attackers, bypassing traditional logging and security controls. This tactic revealed how easily DNS can be abused through hijacking, cache poisoning, and covert channels, raising concerns about how organizations can detect similar threats in the future and highlighting the need for deeper DNS visibility and analysis.

Join for free to read

You Might Also Like


Petrofac Improves Accuracy of Process Models, Increases Capacity 20% for Gas Plant Expansion
Case Study Petrofac Improves Accuracy of Process Models, Increases Capacity…
Aspen Technology

A Blueprint for Self-Sufficiency: Cincom’s Intuitive, Flexible Solution Lets MTL Insurance Manage Customer Communications with Confidence
Case Study A Blueprint for Self-Sufficiency: Cincom’s Intuitive, Flexible…
Cincom Systems

Mid-Size E&C Boosts Ability to Efficiently Complete Relief Sizing with aspenONEEngineering
Case Study Mid-Size E&C Boosts Ability to Efficiently Complete Relief…
Aspen Technology

The Institution of Engineering
Case Study The Institution of Engineering
Budgeting Solutions (UK)

More from ExtraHop


Accelerate Identity Threat Investigations with ExtraHop and Entra ID
Vendor Sheet Accelerate Identity Threat Investigations with ExtraHop and…
ExtraHop

5 Must-Haves for Effective Performance Monitoring and Troubleshooting
Ebook 5 Must-Haves for Effective Performance Monitoring and…
ExtraHop

ExtraHop Sensors
Vendor Sheet ExtraHop Sensors
ExtraHop

A CISO’s Guide to Aligning with the CIO
Guide A CISO’s Guide to Aligning with the CIO
ExtraHop
© 2026 Contentree.  All Rights Reserved   |   Privacy and Cookies   |   Legal   |   Do not sell my info