Get-DnsServerZone: inventory dns server zone with before-and-after evidence
Microsoft states: “The Get-DnsServerZone cmdlet gets the zones that exist on a Domain Name System (DNS) server.”
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 86 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,745 articlesCybersecurity
Suspend-DnsServerZone: suspend dns server zone with bounded evidence
Microsoft states: “The Suspend-DnsServerZone cmdlet suspends a Domain Name System (DNS) zone.”
Read the playbook
Remove-DnsServerResponseRateLimitingExceptionlist: remove dns server response rate limiting exceptionlist under AD/DNS change control
Microsoft states: “The Remove-DnsServerResponseRateLimitingExceptionlist cmdlet removes a Response Rate Limiting (RRL) exception list from a Domain Name System (DNS) server.”
Read the briefing
Set-DnsServerEDns: change dns server edns with rollback checks
Microsoft states: “The Set-DnsServerEDns cmdlet changes extension mechanisms for DNS (EDNS) settings on a Domain Name System (DNS) server.”
Read the checklist
Sync-DnsServerZone: synchronize dns server zone against recorded identity and DNS state
Microsoft states: “Checks the DNS server memory for changes, and writes them to persistent storage.”
Read the explainer
Disable-DnsServerSigningKeyRollover: disable dns server signing key rollover with before-and-after evidence
Microsoft states: “The Disable-DnsServerSigningKeyRollover cmdlet disables key rollover on an input key.”
Read the guide
Import-DnsServerRootHint: import dns server root hint with bounded evidence
Microsoft states: “The Import-DnsServerRootHint cmdlet copies root hints from a Domain Name System (DNS) server.”
Read the playbook
Remove-DnsServerRecursionScope: remove dns server recursion scope under AD/DNS change control
Microsoft states: “The Remove-DnsServerRecursionScope cmdlet removes a recursion scope from a Domain Name System (DNS) server.”
Read the briefing
Add-DnsServerVirtualizationInstance: stage additions to dns server virtualization instance with rollback checks
Microsoft states: “The Add-DnsServerVirtualizationInstance cmdlet adds a virtualization instance to a DNS Server.”
Read the checklist
Get-DnsServerResponseRateLimiting: inventory dns server response rate limiting against recorded identity and DNS state
Microsoft states: “The Get-DnsServerResponseRateLimiting cmdlet displays response rate limiting (RRL) settings on a DNS server.”
Read the explainer