Skip to main content
DGA App for Splunk app icon

DGA App for Splunk

This app shows how to Operationalize Machine Learning using MLTK to detect malicious domain names. Malware like Botnets use domain generation algorithms (DGAs) to create URLs that host malicious websites or command and control servers. Static matching does not always help, so machine learning models can add value and allow to increase detection rates.Built by Splunk Works
splunk product badge
Default Version 2.6.1

July 11, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(9)

Log in to rate this app

Support
Not Supported

This app shows how to Operationalize Machine Learning using MLTK to detect malicious domain names. Malware like Botnets use domain generation algorithms (DGAs) to create URLs that host malicious websites or command and control servers. Static matching does not always help, so machine learning models can add value and allow to increase detection rates.