DGA Intel

Using deep learning to detect DGA domains.

Overview

The DGAIntel Python module allows you to utilize a powerful CNN-LSTM model to predict whether a given domain name was generated by a domain generation algorithm (DGA) or corresponds to a genuine domain. The prediction features are also accesible through this website, but this package allows for direct integration into your workflow.

Usage

Here, we will go through using DGA Intel.

Requirements

DGAIntel is designed for use with Python 3 only. It has only two requirements:

- TensorFlow
- Numpy

Installation

To download dgaintel, simply use Pypi via pip.

$ pip install dgaintel

Using it

First, import DGAIntel.

import dgaintel

Now, to get the predicted probability of a domain name being DGA, simply run

dgaintel.get_prediction('<DOMAIN NAME>')

That's all there is to it!