Skip to content

DNS

Jump to bottom
Tony Phipps edited this page May 7, 2018 · 2 revisions

Network Sniffing

Credential Access

Monitor for suspcious mappings, which may indicate ARP/DNS poisoning.

SELECT Status, DataLength, RecordResponse, TTL, RecordType, Record, Entry, RecordName
GROUP BY Status, DataLength, RecordResponse, TTL, RecordType, Record, Entry, RecordName
Clone this wiki locally