I published the following diary on isc.sans.org: “Suspicious Domains Tracking Dashboard“.
Domain names remain a gold mine to investigate security incidents or to prevent some malicious activity to occur on your network (example by using a DNS firewall). The ISC has also a page dedicated to domain names. But how can we detect potentially malicious DNS activity if domains are not (yet) present in a blacklist? The typical case is DGAâ€™s of Domain Generation Algorithm used by some malware families… [Read more]