Data Source: Bro dns

Date: 2025-01-23

ID: a4576cbf-06cc-4ed0-976c-bf06ccaed011

Author: Jacob Delgado, SnapAttack

Description

Logs DNS queries and responses captured by Zeek (formerly Bro), including details such as queried domains, resolved IPs, query types, and response codes.

Details

Property	Value
Source	`bro:dns:json`
Sourcetype	`bro:dns:json`

Supported Apps

TA for Zeek (version 1.0.8)

Source: GitHub | Version: 2