Re: Easily detected - monitor for DNS TXT record queries ...
Good luck anyway, in any 2000+ employees company, with detecting an 8 hours period DNS lookup, amongst all the shit going to DNS, due to wrong configurations/design of all products/OSes used by everyone ...
Dunno whether TXT loockups are common way, but this is actually quite stealth method of remote activation ...