DNS zone enumeration via Get-DnsServerResourceRecord to derive subnets

Luís Marques@remotecodeexecution

•updated Jul 14, 2026•0•0•1

Detects the use of the PowerShell cmdlet 'Get-DnsServerResourceRecord' to enumerate DNS zone records. Attackers frequently use this technique to map out network infrastructure, identify internal assets, and discover target subnets within an Active Directory environment.