dnscat2

dnscat2 provides an encrypted command-and-control channel over DNS. It supports interactive shells, file transfers, and TCP port forwarding. The talk notes that the traffic can resemble ordinary DNS, which makes it relevant to security monitoring and incident response.

This exhibit describes the technique and its defensive context without operational setup instructions.