hubblestack / hubble

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting.
Apache License 2.0
380 stars 87 forks source link

resurrect dnsutil (from salt/salt/modules/) and invent unique_identif… #1116

Closed jettero closed 2 years ago

jettero commented 2 years ago

The feature that was actually requested, "send a unique dns query through the edge gateways for comparison against the dns tracking software" ... This using superfake.tld, ... hostname.timeofday.superfake.tld should traverse dns to the roots in order to NXDOMAIN since there's no tld that's actually called tld.