DGA App for Splunk

This app shows how to Operationalize Machine Learning using MLTK to detect malicious domain names. Malware like Botnets use domain generation algorithms (DGAs) to create URLs that host malicious websites or command and control servers. Static matching does not always help, so machine learning models can add value and allow to increase detection rates.

Built by Splunk Works

Latest Version 2.6.1

July 11, 2025

Compatibility

Not Available

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0

Rating

0

(0)

Log in to rate this app

Support

Not Supported

This app shows how to Operationalize Machine Learning using MLTK to detect malicious domain names. Malware like Botnets use domain generation algorithms (DGAs) to create URLs that host malicious websites or command and control servers. Static matching does not always help, so machine learning models can add value and allow to increase detection rates.