Most DNS filters come with customizable reporting capabilities that can be filtered to identify patterns in DNS traffic. Simply filter out the IP addresses of legitimate websites most often visited by your organization (i.e., banking, marketing, etc.) and schedule reports for regular intervals to identify when more traffic flows between your organization´s IP address and an unrecognized IP address.