2021-07-22 08:41:50 +00:00
id : dnssec-detection
info :
name : DNSSEC Detection
author : pdteam
severity : info
2022-04-22 10:38:41 +00:00
description : Domain Name System Security Extensions (DNSSEC) are enabled. The Delegation of Signing (DS) record provides information about a signed zone file when DNSSEC enabled.
2022-03-14 13:44:54 +00:00
reference :
- https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en
- https://www.cyberciti.biz/faq/unix-linux-test-and-validate-dnssec-using-dig-command-line/
classification :
cwe-id : CWE-200
2022-04-22 10:38:41 +00:00
tags : dns,dnssec
2021-07-22 08:41:50 +00:00
dns :
- name : "{{FQDN}}"
type : DS
2022-12-16 13:31:50 +00:00
matchers :
2021-07-22 08:41:50 +00:00
- type : regex
regex :
- "IN\tDS\t(.+)"
2022-03-14 13:44:54 +00:00
# Enhanced by mp on 2022/03/14