DNSOBELISK

Summary from the TLDR InfoSec newsletter

An eBPF-based Linux kernel framework disrupts DNS-based C2 channels and tunneling through high-speed deep packet inspection in the kernel stack. It features a userspace deep learning model for detecting obfuscated DNS payloads, dynamic blacklisting, and real-time threat intelligence. It also provides kernel-level DNS exfiltration prevention with access control and threat event streaming.