Failed DNS Zone Transfer

Rule Info

Name
Failed DNS Zone Transfer
Author
Zach Mathis
Description
Detects when a DNS zone transfer failed.
Reference
https://kb.eventtracker.com/evtpass/evtpages/EventId_6004_Microsoft-Windows-DNS-Server-Service_65410.asp
Date
2023-05-24 00:00:00
Modified
None
Id
6d444368-6da1-43fe-b2fc-44202430480e
Tags
attack.reconnaissance attack.t1590.002 DEMO
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=6d444368-6da1-43fe-b2fc-44202430480e

Rule History

Author
Title
Date
Commit
github-actions[bot]
Merge PR #4791 from @nasbench - Promote older rules status from `experimental` to `test`
2024-04-01
a8e1ecd65
Yamato Security
feat: new rule related to `Failed DNS Zone Transfer` (#4235)
2023-05-30
5b10f7e15
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022