attack.t1590.002 | Detection.FYI

Failed DNS Zone Transfer

Aug 12, 2024 · attack.reconnaissance attack.t1590.002 ·
Share on:

Detects when a DNS zone transfer failed.

Read More

Recent Posts

CodeIntegrity - Unmet Signing Level Requirements By File Under Validation
Renamed Powershell Under Powershell Channel
Suspicious Non PowerShell WSMAN COM Provider
Antivirus Password Dumper Detection
HackTool - Certipy Execution
Alternate PowerShell Hosts Pipe
Local System Accounts Discovery - Linux
Disable Windows Defender Functionalities Via Registry Keys

Language

SIGMA 3890 ELASTIC 1199 MQL 452

Tags

ATTACK.DEFENSE-EVASION 1267 ATTACK.EXECUTION 826 USE-CASE-THREAT-DETECTION 826 DOMAIN-ENDPOINT 753 DATA-SOURCE-ELASTIC-DEFEND 593 ATTACK.PERSISTENCE 570 OS-WINDOWS 440 ATTACK.PRIVILEGE-ESCALATION 370 DETECTION.EMERGING-THREATS 330 DATA-SOURCE-ELASTIC-ENDGAME 322 TACTIC-DEFENSE-EVASION 298 ATTACK.CREDENTIAL-ACCESS 297 RESOURCES-INVESTIGATION-GUIDE 272 OS-LINUX 263