Get a Demo
Under Attack?

dns rebind

An illustration shows a red flag with a DNS logo, surrounded by abstract cloud shapes against a blue sky. The text reads, “Upwind: Detect Suspicious Cloud Instance Metadata Activities.”.

Detect Suspicious Cloud Instance Metadata Activities

We’re excited to release  a new detection type, allowing you to detect advanced metadata DNS rebind activities in real time. A metadata DNS rebind detection alerts you that a virtual machine or a container is querying a domain that resolves to the metadata service IP address (169.254.169.254).  What is Cloud Instance Metadata Service (IMDS)? When…
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS