Public search query: how to monitor DNS queries for data exfiltration