Detection rules › By event

Microsoft-Windows-DNS-Server-Service

Event	Rules
Event ID 150	2
Event ID 770	2
Event ID 771	1
Event ID 6004	2

Event ID 150

2 detection rules reference this event. View event page.

Sigma (2)

DLL ServerLevelPluginDll registration ("serverlevelplugindll" feature abuse) severity critical T1574, T1574.001
DNS Server Error Failed Loading the ServerLevelPluginDLL severity high T1574, T1574.001

Event ID 770

2 detection rules reference this event. View event page.

Sigma (2)

DLL ServerLevelPluginDll registration ("serverlevelplugindll" feature abuse) severity critical T1574, T1574.001
DNS Server Error Failed Loading the ServerLevelPluginDLL severity high T1574, T1574.001

Event ID 771

1 detection rules reference this event. View event page.

Sigma (1)

DNS Server Error Failed Loading the ServerLevelPluginDLL severity high T1574, T1574.001

Event ID 6004

2 detection rules reference this event. View event page.

Sigma (2)

Failed DNS server zone transfer for enumeration purposes severity medium T1016
Failed DNS Zone Transfer severity medium T1590, T1590.002