Detecting Exposed Cobalt Strike DNS Redirectors

https://labs.f-secure.com/blog/detecting-exposed-cobalt-strike-dns-redirectors/