""ET POLICY Possible Grams DarkMarket Search DNS Domain Lookup""

SID: 2018406

Revision: 3

Class Type: policy-violation

Metadata: created_at 2014_04_22, updated_at 2014_04_22

Reference:

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: any

Destination Port: 53

Flow:

Contents:

• Value: "|10|grams7enufi7jmdl"

Within:

PCRE:

Special Options:

• nocase

source