Getting in the Zone: dumping Active Directory DNS using adidnsdump
ID: 4516ecbb-85d4-5aa6-85d1-4df39e22a892
STIX ID: report--4516ecbb-85d4-5aa6-85d1-4df39e22a892
Feed Name: Fox-IT blog
This blog post describes adidnsdump, a Python tool and methodology for enumerating Active Directory-integrated DNS zones: how default AD DNS permissions can hide record details from LDAP queries, how to list child objects and resolve unknown records via DNS queries (including via a SOCKS proxy), example usage, and suggested mitigations such as adjusting ACLs or monitoring DNS query volume.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.