https://live.paloaltonetworks.com/t5/general-topics/dns-format-that-sent-to-arcsight-it-contain-www/m-p/220456#M98104 <P>Malicious domain names some of them&nbsp;contain www before domain name like <A href="http://www.xyz.com" target="_blank">www.xyz.com</A>.</P> <P>so if there is any solution to define that as domain name only like (xyz.com) to use it in correlation rules.</P> <P>&nbsp;</P> Tue, 03 Jul 2018 21:23:13 GMT ahmed_hassan 2018-07-03T21:23:13Z https://live.paloaltonetworks.com/t5/general-topics/dns-format-that-sent-to-arcsight-it-contain-www/m-p/220456#M98104 <P>Malicious domain names some of them&nbsp;contain www before domain name like <A href="http://www.xyz.com" target="_blank">www.xyz.com</A>.</P> <P>so if there is any solution to define that as domain name only like (xyz.com) to use it in correlation rules.</P> <P>&nbsp;</P> Tue, 03 Jul 2018 21:23:13 GMT https://live.paloaltonetworks.com/t5/general-topics/dns-format-that-sent-to-arcsight-it-contain-www/m-p/220456#M98104 ahmed_hassan 2018-07-03T21:23:13Z https://live.paloaltonetworks.com/t5/general-topics/dns-format-that-sent-to-arcsight-it-contain-www/m-p/220570#M98105 <P>HI&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/11678">@lmori</a>, can you help me in this issue</P> Thu, 05 Jul 2018 07:54:52 GMT https://live.paloaltonetworks.com/t5/general-topics/dns-format-that-sent-to-arcsight-it-contain-www/m-p/220570#M98105 ahmed_hassan 2018-07-05T07:54:52Z