Discovery > Discovery Modules > Network Infrastructure > DNS Zone Discovery > Discovery Mechanism – Windows
Discovery Mechanism – Windows
This section includes the following commands:
Query Windows Registry for Zone Information
Command
Reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones"Output
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones\104.24.172.in-addr.arpa HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones\foo.bar.net HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones\od5.lohika.com HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones\ucmdb-ex.dot
Mapping
|
CMD Output Attribute |
CI Name |
CI Attribute |
|---|---|---|
|
Key name |
DNS Zone |
Name |
List Root Domain to Transfer Resource Records
Zone resource records of type CNAME and A are transferred by listing the root domain of the zone in the nslookup command.
Command
echo ls -d <domain> | nslookup - <name server>Output
Ns-2.od5.lohika.com. CNAME dc05-2.od5.lohika.com
od5.lohika.com. A 134.44.98.22
ftp.od5.lohika.com. CNAME od5.lohika.com.
Mapping
|
CMD Output Attribute |
CI Name |
CI Attribute |
|---|---|---|
|
First column |
DNS Alias |
Name |
|
Third column |
DNS Alias |
Canonical name |
