update: dns template format update (#3305)

dns/azure-takeover-detection.yaml

@@ -10,9 +10,7 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: A
-    class: inet
-    recursion: true
-    retries: 3
+
     matchers-condition: and
     matchers:
       - type: word

dns/can-i-take-over-dns.yaml

@@ -10,9 +10,6 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: NS
-    class: inet
-    recursion: true
-    retries: 3
 
     matchers-condition: or
     matchers:

dns/cname-service-detection.yaml

@@ -9,9 +9,6 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: CNAME
-    class: inet
-    recursion: true
-    retries: 3
 
     matchers-condition: or
     matchers:

dns/detect-dangling-cname.yaml

@@ -14,9 +14,7 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: A
-    class: inet
-    recursion: true
-    retries: 3
+
     matchers-condition: and
     matchers:
       - type: word

dns/dns-waf-detect.yaml

@@ -9,15 +9,9 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: CNAME
-    recursion: true
-    retries: 5
-    class: inet
 
   - name: "{{FQDN}}"
     type: NS
-    recursion: true
-    retries: 5
-    class: inet
 
     matchers:
       - type: word

dns/dnssec-detection.yaml

@@ -11,9 +11,6 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: DS
-    class: inet
-    recursion: true
-    retries: 3
 
     extractors:
       - type: regex

dns/ec2-detection.yaml

@@ -10,9 +10,6 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: CNAME
-    class: inet
-    recursion: true
-    retries: 2
 
     extractors:
       - type: regex

dns/elasticbeantalk-takeover.yaml

@@ -23,9 +23,6 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: A
-    class: inet
-    recursion: true
-    retries: 3
 
     matchers-condition: and
     matchers:

dns/mx-service-detector.yaml

@@ -10,15 +10,14 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: MX
-    class: inet
-    recursion: true
-    retries: 5
+
     matchers-condition: or
     matchers:
       - type: word
         name: "Office 365"
         words:
           - "mail.protection.outlook.com"
+
       - type: word
         name: "Google Apps"
         words:
@@ -27,21 +26,25 @@ dns:
           - "alt1.aspmx.l.google.com"
           - "alt2.aspmx.l.google.com"
           - "aspmx.l.google.com"
+
       - type: word
         name: "ProtonMail"
         words:
           - "mail.protonmail.ch"
           - "mailsec.protonmail.ch"
+
       - type: word
         name: "Zoho Mail"
         words:
           - "mx.zoho.eu"
           - "mx2.zoho.eu"
           - "mx3.zoho.eu"
+
       - type: word
         name: "ForcePoint Email Security"
         words:
           - "in.mailcontrol.com"
+
       - type: word
         name: "E-Zorg NL"
         words:
@@ -49,22 +52,26 @@ dns:
           - "spamfilter01.ezorg.nl"
           - "spamfilter.ezorg.nl"
           - "spamfilter03.ezorg.nl"
+
       - type: word
         name: "Kerio Cloud EU"
         words:
           - "mx1.eu1.kerio.cloud"
           - "mx2.eu1.kerio.cloud"
+
       - type: word
         name: "Kerio Cloud US"
         words:
           - "mx1.us1.kerio.cloud"
           - "mx2.us1.kerio.cloud"
           - "mx3.us1.kerio.cloud"
+
       - type: word
         name: "Proofpoint EU"
         words:
           - "mx1-eu1.ppe-hosted.com"
           - "mx2-eu1.ppe-hosted.com"
+
       - type: word
         name: "Proofpoint US"
         words:

dns/servfail-refused-hosts.yaml

@@ -9,9 +9,7 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: A
-    class: inet
-    recursion: true
-    retries: 3
+
     matchers:
       - type: word
         words:

dns/spoofable-spf-records-ptr.yaml

@@ -10,9 +10,7 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: TXT
-    class: inet
-    recursion: true
-    retries: 3
+
     matchers:
       - type: word
         words:

dns/worksites-detection.yaml

@@ -10,9 +10,7 @@ info:
 dns:
   - name: "{{FQDN}}"
     type: A
-    class: inet
-    recursion: true
-    retries: 2
+
     matchers:
       - type: word
         words: