Failed DNS Zone Transfer

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Detects when a DNS zone transfer failed.

Severity

Trouble

Rule Requirement

Criteria

Action1: actionname = "DNS Zone Tranfer" select Action1.HOSTNAME,Action1.MESSAGE,Action1.WORKSTATION_NAME,Action1.REMOTEHOST

Detection

Execution Mode

realtime

Log Sources

Active Directory

Author

Zach Mathis