Skip to content
Threat Feed
Subscribe

Product

Active Directory Integrated DNS

1 brief RSS
low advisory

Suspicious DNS-Named Record Creation in Active Directory Integrated DNS

Detection of DNS record creation by non-system accounts within Active Directory Integrated DNS (ADIDNS), which attackers can abuse to perform Dynamic Spoofing attacks, potentially targeting services like WPAD for credential access.

Active Directory +1 credential-access windows active-directory
2r 1t