Page 56 - CSEW
P. 56
Cisco Umbrella Investigate – Speed
Up Investigations
Query suspicious domain found Find site was registered by a Historical data shows previous
in proxy logs privacy protection service registrants
Looks like someone was trying to cover their tracks… Was registered with email used with other
malicious domains
Uncover other contact See name server history Pivot to find other malicious
information domains
© 2016 Engage ESM All Rights Reserved 62
