Detección de la propiedad de firma de zona DNS

Microsoft.Windows.DNSServer.2016.Zone.IsSignedProperty.Discovery (Discovery)

Este flujo de trabajo detecta la propiedad de zona DNS firmada en la versión de Windows 10.0 (Windows 2016 y 1709+)

Knowledge Base article:

Element properties:

Object Discovery Details:

Member Modules:

Source Code:

<Discovery ID="Microsoft.Windows.DNSServer.2016.Zone.IsSignedProperty.Discovery" Enabled="false" Target="Microsoft.Windows.DNSServer.2016.Zone" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Windows.DNSServer.2016.Zone">

      <Property TypeID="Microsoft.Windows.DNSServer.2016.Zone" PropertyID="IsSigned"/>

    </DiscoveryClass>

  </DiscoveryTypes>

  <DataSource ID="DS" RunAs="Microsoft.Windows.DNSServer.2016.ActionAccount" TypeID="Microsoft.Windows.DNSServer.2016.IsZoneSignedProperty.DS">

    <ZoneName>$Target/Property[Type="Microsoft.Windows.DNSServer.2016.Zone"]/ZoneName$</ZoneName>

    <ComputerName>$Target/Property[Type="Microsoft.Windows.DNSServer.2016.Zone"]/HostName$</ComputerName>

    <IntervalSeconds>15000</IntervalSeconds>

    <SyncTime/>

    <TimeoutSeconds>300</TimeoutSeconds>

  </DataSource>

</Discovery>