An Introduction to Passive DNS for Threat Hunting Part I – CRAWL

hosted by CIRCL

Start: Tuesday, 20 Apr 2021 17:00

End: Tuesday, 20 Apr 2021 18:30

  • About this event

    CRAWL, WALK, RUN series – Farsight Security / MISP webinars

    An Introduction to Passive DNS for Threat Hunting

    Part I – CRAWL

    In this three-parts webinar series Farsight Security and CIRCL will provide an overview of Farsight’s Passive DNS data, how historical Passive DNS objective observations can be used to uncover malicious activities going back in time. Using practical use cases, we will then demonstrate how to gather the same evidence using Farsight passive DNS module from within MISP platform, and share the findings with the community. We will leave plenty of time for you to follow the steps we demonstrate, as well as ask questions.  


    Bad actors can create, use, and discard domain names for malicious campaigns within minutes. Starting with a single suspicious domain or IP address, security professionals can use historical Passive DNS to gain previously unknown information about related DNS assets to help identify the infrastructure used in cyberattacks to enable organizations to more quickly respond and protect against fast-moving online threats, ranging from phishing to nation-state attacks.


    In this webinar, Farsight Security will provide an introduction to Passive DNS and popular use cases for threat hunting, brand protection and other cybersecurity-related activities. In addition, we will provide an overview of MISP – a powerful open-source threat sharing platform for sharing, storing and correlating Indicators of compromise of targeted attacks, threat intelligence, financial fraud information, vulnerability information or even counter-terrorism information. Then, we will demonstrate how Farsight DNSDB, integrated with MISP, can advance your cyberinvestigations.


  • Registration

    The event is over. It is not possible to purchase tickets anymore.This event used XING Events for online ticketing. Start to organise your own events in an effective and professional way.
    Test it now

    * incl. legal VAT


Or share this link:



  • Directions

  • More events

    • MISP Training - Threat Intelligence Introduction for Analysts and Security Professionals
      13 September 2022 14:00
    • MISP Training - Administration and Deployment of MISP software
      14 September 2022 14:00
    • MISP Training - Advanced Developer session from API to MISP internals
      15 September 2022 14:00
    • Cyber and Threat Intelligence Summit (CTIS-2022)
      19 October 2022 09:00
powered by XING Events

Event organiser: CIRCL
More participants thanks to online event management solutions from XING Events.