It is all over the news today that Twitter was hacked by a DNS redirection/hijacking.
My question is, what tools or techniques do you guys use to monitor your DNS/whois and detect this kind of attacks?
I run the Sucuri monitor (free) and it alerts me whenever the DNS/Whois is changed.
I have been monitoring twitter, facebook and other big sites for a while and that's the alert I got:
But this is just a first line of defense/visibility to react faster. If you host your own DNS, you could do a FIM (file integrity monitor) to detect changes on it...
*posting what I do in here, to do not affect other answers. Plus, for the means of full-disclosure, I wrote the sucuri monitor :)