dns-security

What problem does it solve?

This Skill helps security engineers evaluate the security and integrity of DNS infrastructure, including DNSSEC deployment, resolver validation, and filtering practices.

Core Features & Use Cases

• DNSSEC Configuration Analysis: Checks whether authoritative zones are signed correctly with strong algorithms and proper key management practices.
• Resolver Validation Evaluation: Verifies if recursive resolvers have DNSSEC validation enabled and trust anchors are current.
• Encrypted DNS Assessment: Reviews the deployment of DNS over TLS and HTTPS, ensuring client and resolver privacy.
• DNS Filtering & RPZ Inspection: Examines Response Policy Zones and protective DNS services for malicious domain filtering and policy enforcement.
• Exfiltration Detection Readiness: Assesses if DNS query logging and anomaly detection capabilities are implemented to identify covert exfiltration channels.
• Threat Detection & Policy Enforcement: Evaluates infrastructure against best practices per NIST and CIS controls for DNS security.

Quick Start

Review your DNS configurations by analyzing the files and settings across your authoritative servers, recursive resolvers, and filtering services.