Brand Monitoring

• Monitor Web Traffic For Brand Abuse :
  network Endpoint risk_score:25 2024-10-17 version:3
  The following analytic identifies web requests to domains that closely resemble your monitored brand's domain, indicating potential brand abuse. It leverages data from web traffic sources, such as web proxies or network traffic analysis tools, and cross-references these with known domain permutations generated by the "ESCU - DNSTwist Domain Names" search. This activity is significant as it can indicate phishing attempts or other malicious activities targeting your brand. If confirmed malicious, attackers could deceive users, steal credentials, or distribute malware, leading to significant reputational and financial damage.


• Monitor DNS For Brand Abuse :
  network Endpoint risk_score:25 2024-10-17 version:3
  This search looks for DNS requests for faux domains similar to the domains that you want to have monitored for abuse.


• Monitor Email For Brand Abuse :
  network Endpoint risk_score:25 2024-10-17 version:4
  The following analytic identifies emails claiming to be sent from a domain similar to one you are monitoring for potential abuse. It leverages email header data, specifically the sender's address, and cross-references it with a lookup table of known domain permutations generated by the "ESCU - DNSTwist Domain Names" search. This activity is significant as it can indicate phishing attempts or brand impersonation, which are common tactics used in social engineering attacks. If confirmed malicious, this could lead to unauthorized access, data theft, or reputational damage.