Patent 11856010 was granted and assigned to Palo Alto Networks on December, 2023 by the United States Patent and Trademark Office.
Malicious domain finding using DNS query pattern analysis is disclosed. A first DNS query signature and a second DNS query signature are generated, using a set of DNS query records. The first and second DNS query signatures are compared, and the second DNS query signature is identified as malicious based on a detected match between the first and second DNS query signatures.