Added DNSSEC Detection

patch-1
sandeep 2021-07-22 14:11:50 +05:30
parent 2b7575bbb6
commit 7f0295a415
1 changed files with 22 additions and 0 deletions

22
dns/dnssec-detection.yaml Normal file
View File

@ -0,0 +1,22 @@
id: dnssec-detection
info:
name: DNSSEC Detection
description: A template to check if Delegation of Signing (DS) record provides information about a signed zone file when DNSSEC enabled.
author: pdteam
severity: info
tags: dns,dnssec
reference: https://www.cyberciti.biz/faq/unix-linux-test-and-validate-dnssec-using-dig-command-line/
dns:
- name: "{{FQDN}}"
type: DS
class: inet
recursion: true
retries: 3
extractors:
- type: regex
group: 1
regex:
- "IN\tDS\t(.+)"