Machine Learning in Security: Detect Suspicious TXT Records Using Deep Learning | Splunk

There are about 90 DNS resource record types (RR) of which many of them are obsolete today. Of the RR’s used, DNS TXT record offers the most flexibility in content by allowing user defined text. The TXT record initially designed to hold descriptive text (RFC 1035) is widely used for email verification, spam prevention and domain ownership verification. Besides well defined purposes of DNS TXT records, it is also used for malicious purposes to create DNS amplification attacks, injection of malware and exfiltrate data from the victim’s machine. The freedom of unstructured text poses a huge security threat because any base encoded non-text data like malware, executables or simple commands can be camouflaged as text. While DNS traffic has been overlooked as trustworthy and secure, recent DNS threat research reports an increase in DNS Tunneling attacks over the past year. Several botnet attacks have also used DNS TXT based botnet communication. The SMLS team has developed a detection in the

Machine Learning in Security: Detect Suspicious TXT Records Using Deep Learning | Splunk Machine Learning in Security: Detect Suspicious TXT Records Using Deep Learning Security May 02, 2023 Namratha Sreekanta There are about 90 DNS resource record types (RR) of which many of them are obsolete today. Of the RR’s used, DNS TXT record offers the most flexibility in content by allowing user defined text. The TXT record initially designed to hold descriptive text (RFC 1035) is widely used for email verification, spam prevention and domain ownership verification. Besides well defined purposes of DN

related reading

• Machine Learning in Security: Detect DNS Data Exfiltration Using Deep Learning | Splunksplunk.com
• Machine Learning in Security: Deep Learning Based DGA Detection with a Pre-trained Model | Splunksplunk.com
• Security incident disclosure — July 2026huggingface.co
• Machine Learning in Security: Detecting Suspicious Processes Using Recurrent Neural Networks | Splunksplunk.com
• Machine Learning Driven Smishing Detection Framework for Mobile Securityarxiv.org
• The Operating System for Modern Securitydepthfirst.com
• Model-Assisted Threat Hunting (M-ATH) with the PEAK Framework | Splunksplunk.com
• Pangram 4 Technical Reportpangram-public.s3.us-east-1.amazonaws.com
• Deep Anomaly Detection with Outlier Exposurearxiv.org
• Accelerating Document AIhuggingface.co
• DNSSEC | Computer Securitytextbook.cs161.org
• GitHub - open-edge-platform/anomalib: An anomaly detection library comprising state-of-the-art algorithms and features such as experiment management, hyper-parameter optimization, and edge inference.github.com