DNS Query
The DNS query object represents a specific request made to the Domain Name System (DNS) to retrieve information about a domain or perform a DNS operation. This object encapsulates the necessary attributes and methods to construct and send DNS queries, specify the query type (e.g., A, AAAA, MX). Defined by D3FEND d3f:DNSLookup.
Attributes
Caption | Name | Type | Description |
---|---|---|---|
Resource Record Class | class |
String |
The class of resource records being queried. See RFC1035. For example: IN .
|
Hostname | hostname |
Hostname |
The hostname or domain being queried. For example: www.example.com
|
DNS Opcode | opcode |
String | The DNS opcode specifies the type of the query message. |
DNS Opcode ID | opcode_id |
Integer |
The DNS opcode ID specifies the normalized query message type as defined in RFC-5395.
|
Packet UID | packet_uid |
Integer | The DNS packet identifier assigned by the program that generated the query. The identifier is copied to the response. |
Raw Data | raw_data |
JSON | The event data as received from the event source. |
Record ID | record_id |
String | Unique identifier for the object |
Resource Record Type | type |
String | The type of resource records being queried. See RFC1035. For example: A, AAAA, CNAME, MX, and NS. |
Unmapped Data | unmapped |
Unmapped[] | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
Relationships
Inbound Relationships
These objects and events reference DNS Query in their attributes:
Outbound Relationships
DNS Query references the following objects and events in its attributes:
This page describes qdm-1.3.2+ocsf-1.3.0
Updated about 2 months ago