BlueTuxedo
BlueTuxedo copied to clipboard
Look for GlobalNames zone
Allows for single-name domains. Dangerous af.
See: https://learn.microsoft.com/en-us/previous-versions/technet-magazine/cc137727(v=msdn.10)
Would love to hear an estimation of how often you seen these in your engagements, and what risks you see resulting from the use of them. It's not hard to imagine that they could be abused, but I haven't dug into the idea at all.
Gotta start collecting this data on engagements first! (How to be doing this by year's end.)