Domain is queried for a zone transferred.

Description

Domain is queried for a zone transferred.

Query · wazuh

match="IN AXFR -"

Fires when

Wazuh evaluates a chain top-down. Every rule above this one must match on the same event before this rule is tested at all.

  1. 12100 Grouping of the named rules anchor level 0
    decoded_as=named
  2. 12137 Domain is queried for a zone transferred. suppression level 0 this rule
    match="IN AXFR -"

Rule dependencies

Depends on

Raw source Domain is queried for a zone transferred. · Wazuh XML
Esc
Published by Wazuh Core Ruleset ↗, licensed under GPLv2 ↗. Reproduced here unmodified. 
<rule id="12137" level="0">
    <if_sid>12100</if_sid>
    <match>IN AXFR -</match>
    <description>Domain is queried for a zone transferred.</description>
  </rule>

Detection rules belong to the projects that publish them and remain under their own licenses. This site indexes and links to them; it claims no rights in them.