D3-DNSCE

Evict
DNS Cache Eviction

Definition

Flushing DNS to clear any IP addresses or other DNS records from the cache.

# How it works

Flushing the DNS Cache will clear the IP addresses of websites you have visited recently. This can help remediate DNS Cache Poisoning attacks, which is a type of cyber attack where corrupted DNS data is inserted into the cache, causing redirects to malicious websites.

On windows, the DNS cache can be wiped by issuing the command `ipconfig /flushdns`.

Artifact Relationships

This defensive technique relates to specific digital artifacts.

deletes
DNS Cache Eviction
DNS Record

References

Reference - Eviction Guidance for Networks Affected by the SolarWinds and Active Directory/M365 Compromise - CISA