Results for “dragos”

Detects DNS tunneling by computing Shannon entropy of DNS query names, analyzing query length distributions, inspecting TXT record payloads, and identifying high subdomain cardinality using scapy for packet capture analysis.

Guides the choice between DuckDB and Polars for each stage of an analytical pipeline, covering Arrow transfer, lazy versus eager execution, registration lifetime, schema conversion, and result ownership.