Detection rules › By catalog entry

Microsoft-Windows-DNS-Server-Service

Catalog entry	Rules
Event ID 150	2
Event ID 770	2
Event ID 771	1
Event ID 6004	2

Event ID 150

2 detection rules reference this catalog entry. View catalog entry.

Sigma (2)

DLL ServerLevelPluginDll registration ("serverlevelplugindll" feature abuse) severity critical T1574,T1574.001
DNS Server Error Failed Loading the ServerLevelPluginDLL severity high T1574,T1574.001

Event ID 770

2 detection rules reference this catalog entry. View catalog entry.

Sigma (2)

DLL ServerLevelPluginDll registration ("serverlevelplugindll" feature abuse) severity critical T1574,T1574.001
DNS Server Error Failed Loading the ServerLevelPluginDLL severity high T1574,T1574.001

Event ID 771

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

DNS Server Error Failed Loading the ServerLevelPluginDLL severity high T1574,T1574.001

Event ID 6004

2 detection rules reference this catalog entry. View catalog entry.

Sigma (2)

Failed DNS server zone transfer for enumeration purposes severity medium T1016
Failed DNS Zone Transfer severity medium T1590,T1590.002

Back to all Microsoft-Windows-DNS-Server-Service catalog entries