The Domain Name System (DNS) is a complex network that communicates through multiple servers distributed around the world to match domains with IP addresses. The rapid expansion of the internet has made DNS vulnerable to attacks, so its traffic needs to be monitored and analyzed. The earlier analysts are alerted to a hazard, the earlier they can respond to a cyberattack or decide to take a different route. Early warning signs include blocking DNS traffic from malicious domains and detouring. The early warning signs can help empower your team to block, respond to, anticipate and plan for DNS attacks.”]
Source: https://securityintelligence.com/posts/threat-intelligence-is-the-socs-road-map-to-dns-security/