dns-response
April 24, 2024 · View on GitHub
Description
A DNS response was recevied
Parameters
| Parameter | Value |
|---|---|
| Subject | dns |
| Activity | response |
| Activity Type | dns-response |
| Pretty Name | Dns Response |
Legacy Names
| Success | Fail |
|---|---|
| dns-response | dns-response |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
dns-response:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| dns_response | ✓ | ✓ | |
| dns_response_code | ✓ | ||
| dns_response_flags | ✓ | ||
| dest_host | ✓ |
dns-response:fail
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| dns_response | ✓ | ✓ | |
| dns_response_code | ✓ | ||
| dns_response_flags | ✓ | ||
| dest_host | ✓ | ||
| failure_reason | ✓ |