DNS tunneling is an attack technique used by adversaries to exfiltrate data via a DNS-based channel. Attackers attempt this by encoding data of other programs and protocols into DNS queries. Detecting and responding to DNS tunneling attacks and exfiltration attempts is a vital part of any DNS security service.