D3-FRDDL
Forward Resolution Domain Denylisting
Definition
Blocking a lookup based on the query's domain name value.
How it works
Policies are created that filter DNS queries using fully qualified domain name (FQDN) of record in the query. A DNS policy can be created for blocking DNS queries from FQDNs that have been identified as unauthorized.
Considerations
Continuous maintenance of unauthorized domain lists is needed to keep up to date as updates occur.
Artifact Relationships
This defensive technique relates to specific digital artifacts.