More Odd DNS Records: NIMLOC, (Tue, Jul 7th)
Summary
This article from the SANS Internet Storm Center discusses a less common DNS record type called NIMLOC. The author notes that while not new, this record type has appeared in their DNS logs and they aim to explore its nature.
IFF Assessment
FOE
The discovery and analysis of unusual DNS records like NIMLOC can potentially reveal new reconnaissance or communication methods used by threat actors.
Defender Context
Understanding the various types of DNS records and their potential misuses is crucial for network defenders. Unusual DNS activity, like the mention of NIMLOC records, can be an indicator of malicious activity or reconnaissance by attackers.