So i just noticed i had alot of intrusions of 2 differently located “Nslookup.exe”
now i know its a “command-line administrative tool for testing and troubleshooting DNS servers. This tool is installed along with the TCP/IP protocol through Control Panel.”
but i recall not seeing anything pop up about it at these times , i mean i hardly done much except scan a bunch of sites with - urlquery.net , app.webinspector.com , sucuri.net , virustotal.com/
is there a way to see what both Nslookup.exe was trying to connect to