LogScale Queries

Query

[T1059.001] NSLookup Remote Payload - Win

LogScale · Detection & Monitoring · v1 · @sebastian · 25.7.2026

All Queries

Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1059.001] NSLookup Remote Payload - Win.logscale. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Queries/%5BT1059.001%5D%20NSLookup%20Remote%20Payload%20-%20Win.logscale

DetectionEndpointWindows

Query contentv1

Download v1
Loading editor…

Version history

Every save keeps the previous content. Open any version to view or download it.

  1. v1current

    24.7.2026, 19:00:12