Introducing SOC Insights for BloxOne Threat Defense: Boost your SOC efficiency with AI-driven insights to eliminate manual work and accelerate investigation and response times. Read the blog announcement here.

Reporting

Reply

Report host DNS target queries

[ Edited ]
New Member
Posts: 1
3040     0

Is there a way to generate a report which shows me the target DNS queries from a spacific host?

I have a host machine that's generating an inordinate amout of queries and I need to know what it's querying. Is there a canned report to find that out or is there a way to create a new report fom the reporting server to do that?

 

Thanks,

 

Pete Franco

Re: Report host DNS target queries

[ Edited ]
Superuser
Posts: 81
3041     0

Yes Pete, we can!

 

I’ve crafted an XML code in the past which would meet your use-case. Please see my reply to one of the community posts here . Hope that’ll meet your expectations.

 

In any case, let me know if you have questions/concerns.

 

Best regards.

Showing results for 
Search instead for 
Did you mean: 

Recommended for You