This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

If i identified medum allert reconnaissance using dns

Question
0

Sign in to vote

i found one alert reconnaissance using dns

please tell me what need to do be done for identifying and resolving the issues.

i observed few of reconnaissance using dns and directory services.

what would be the fix for this errors.

Friday, August 18, 2017 7:20 PM

Answers

0

Sign in to vote
Hello,

For investigating reconnaissance using DNS, you can refer to the following article.

https://docs.microsoft.com/en-us/advanced-threat-analytics/use-case-dns

For Reconnaissance using directory services enumeration, you can follow the recommended actions, which is listed on the alert info page.

Best regards,
Andy Liu

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
- Marked as answer by Ramakrishna addagalla Monday, August 21, 2017 5:46 PM
- Unmarked as answer by Ramakrishna addagalla Monday, August 21, 2017 5:46 PM
- Marked as answer by Ramakrishna addagalla Monday, August 21, 2017 5:46 PM
- Unmarked as answer by Ramakrishna addagalla Monday, August 21, 2017 5:46 PM
- Marked as answer by Ramakrishna addagalla Monday, August 21, 2017 5:46 PM
Monday, August 21, 2017 8:16 AM