Potential Discovery Activity Via Dnscmd.EXE

SigmaHQ Detections@sigmaHQ

•updated May 20, 2025•0•0•0

Detects an attempt to leverage dnscmd.exe to enumerate the DNS zones of a domain. DNS zones used to host the DNS records for a particular domain.