{"id":20427,"date":"2024-08-28T16:45:53","date_gmt":"2024-08-28T20:45:53","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=20427"},"modified":"2024-08-28T16:45:53","modified_gmt":"2024-08-28T20:45:53","slug":"dns-scavenging-alerts","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/","title":{"rendered":"DNS Scavenging alerts"},"content":{"rendered":"<figure id=\"attachment_20429\" aria-describedby=\"caption-attachment-20429\" style=\"width: 826px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-20429 size-full\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png\" alt=\"\" width=\"826\" height=\"234\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png 826w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging-300x85.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging-768x218.png 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging-350x100.png 350w\" sizes=\"auto, (max-width: 709px) 85vw, (max-width: 909px) 67vw, (max-width: 984px) 61vw, (max-width: 1362px) 45vw, 600px\" \/><\/a><figcaption id=\"caption-attachment-20429\" class=\"wp-caption-text\">DNS Scavenging how it works<\/figcaption><\/figure>\n<p>Need DNS Scavenging alerts, to see what&#8217;s cleaned up, or that scavenging failed?\u00a0 Download the DNS Addendum pack from my GitHub repo <a href=\"https:\/\/github.com\/theKevinJustin\/DNSAddendumAgnostic\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/theKevinJustin\/DNSAddendumAgnostic<\/a><\/p>\n<p>Latest revision first includes a EventID 2502 monitor for scavenging failed.\u00a0 Second, the monitor has count logic (setup to alert with 2 events in 30 minutes).\u00a0 Third, EventID 2501 rule details scavenging totals.\u00a0 Lastly, built a weekly report to summarize the scavenging alerts (cliff notes!).<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h3>Some quick &#8216;how-to&#8217; setup DNS scavenging<\/h3>\n<p>Example of RegKey showing that Scavenging is setup &#8211; note Scavenging Interval key<\/p>\n<p><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-RegKeys.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-20433\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-RegKeys-300x204.png\" alt=\"\" width=\"300\" height=\"204\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-RegKeys-300x204.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-RegKeys.png 706w\" sizes=\"auto, (max-width: 300px) 85vw, 300px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>Example of AD integrated DNS setup with\u00a021 day scavenging interval, and prompts to configure (click OK twice)<\/p>\n<figure id=\"attachment_20434\" aria-describedby=\"caption-attachment-20434\" style=\"width: 300px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-setup.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-20434\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-setup-300x215.png\" alt=\"\" width=\"300\" height=\"215\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-setup-300x215.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-setup-768x551.png 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-setup.png 960w\" sizes=\"auto, (max-width: 300px) 85vw, 300px\" \/><\/a><figcaption id=\"caption-attachment-20434\" class=\"wp-caption-text\">DNS Scavenging setup on AD integrated DNS server<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Import management pack, and run DNS scavenging.<\/p>\n<p>&nbsp;<\/p>\n<h3>Verify scavenging alerts<\/h3>\n<p>SCOM Monitoring Tab &gt; Active Alerts &gt; &#8216;Look for:&#8217; scavenging<\/p>\n<p>Example output<a href=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-Alerts.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-20432\" src=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-Alerts-300x98.png\" alt=\"\" width=\"300\" height=\"98\" srcset=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-Alerts-300x98.png 300w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-Alerts-768x252.png 768w, https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNS-scavenging-Alerts.png 851w\" sizes=\"auto, (max-width: 300px) 85vw, 300px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<h3>Additional SCOM PowerShell commands<\/h3>\n<p>Run PowerShell commands from the SCOM management server (MS)<\/p>\n<pre>$DNSAlerts = get-scomalert -name \"*Scavenging*\"\r\n$DNSAlerts\r\n$DNSAlerts | format-table PrincipalName,TimeRaised,Description -auto -wrap<\/pre>\n<p>&nbsp;<\/p>\n<p><strong>Example Output<\/strong><\/p>\n<p>PS C:\\Users\\scomadmin&gt; $DNSAlerts = get-scomalert -name &#8220;*Scavenging*&#8221;<\/p>\n<p>PS C:\\Users\\scomadmin&gt; $DNSAlerts<\/p>\n<p>&nbsp;<\/p>\n<p>Severity\u00a0\u00a0\u00a0\u00a0 Priority\u00a0\u00a0 Name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TimeRaised<\/p>\n<p>&#8212;&#8212;&#8211;\u00a0\u00a0\u00a0\u00a0 &#8212;&#8212;&#8211;\u00a0\u00a0 &#8212;-\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8212;&#8212;&#8212;-<\/p>\n<p>Warning\u00a0\u00a0\u00a0\u00a0\u00a0 Normal\u00a0\u00a0\u00a0\u00a0 Windows DNS Event 2502 Scavenging Failed monitor addendum alert\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 8\/19\/2024 2:02:3&#8230;<\/p>\n<p>Warning\u00a0\u00a0\u00a0\u00a0\u00a0 Normal\u00a0\u00a0\u00a0\u00a0 Windows DNS Event 2502 Scavenging Failed monitor addendum alert\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 8\/19\/2024 1:07:0&#8230;<\/p>\n<p>Information\u00a0 Normal\u00a0\u00a0\u00a0\u00a0 Proactive DailyTasks DNSAlerts Scavenging Summary Report Alert\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 8\/19\/2024 10:11:&#8230;<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h4>DNS alerts formatted<\/h4>\n<p>PS C:\\Users\\scomadmin&gt; $DNSAlerts | format-table PrincipalName,TimeRaised,Description -auto -wrap<\/p>\n<p>&nbsp;<\/p>\n<p>PrincipalName\u00a0\u00a0\u00a0 TimeRaised\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Description<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;-\u00a0\u00a0\u00a0 &#8212;&#8212;&#8212;-\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8212;&#8212;&#8212;&#8211;<\/p>\n<p>DC02.testlab.net 8\/19\/2024 2:02:32 PM\u00a0 Windows DNS Event 2502 Scavenging Failed monitor alert 1 alert in 15 minutes<\/p>\n<p>Event Description:<\/p>\n<p>The DNS server has completed a scavenging cycle but no nodes were visited.<\/p>\n<p>Possible causes of this condition include:<\/p>\n<p>&#8230;<\/p>\n<p>The next scavenging cycle is scheduled to run in 168 hours.<\/p>\n<p>&nbsp;<\/p>\n<p>Learn articles for more details <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/networking\/dns-scavenging-setup\" target=\"_blank\" rel=\"noopener\">https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/networking\/dns-scavenging-setup<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Need DNS Scavenging alerts, to see what&#8217;s cleaned up, or that scavenging failed?\u00a0 Download the DNS Addendum pack from my GitHub repo https:\/\/github.com\/theKevinJustin\/DNSAddendumAgnostic Latest revision first includes a EventID 2502 monitor for scavenging failed.\u00a0 Second, the monitor has count logic (setup to alert with 2 events in 30 minutes).\u00a0 Third, EventID 2501 rule details scavenging &hellip; <a href=\"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;DNS Scavenging alerts&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,567,5,7,530,742],"tags":[763,908,762,816,758,241,909,342,484],"class_list":["post-20427","post","type-post","status-publish","format-standard","hentry","category-administration","category-authoring","category-best-practice","category-mp-management-pack","category-scom","category-windows","tag-active-directory-integrated-dns","tag-ad-integrated","tag-adi","tag-adi-dns","tag-dns","tag-monitoring","tag-scavenging","tag-scom","tag-windows"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>DNS Scavenging alerts - Kevin Justin&#039;s Blog<\/title>\n<meta name=\"description\" content=\"Post to set up DNS scavenging and monitoring, including testing and PowerShell commands to see alert outputs, reports, etc.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DNS Scavenging alerts - Kevin Justin&#039;s Blog\" \/>\n<meta property=\"og:description\" content=\"Post to set up DNS scavenging and monitoring, including testing and PowerShell commands to see alert outputs, reports, etc.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin&#039;s Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-08-28T20:45:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"DNS Scavenging alerts\",\"datePublished\":\"2024-08-28T20:45:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/\"},\"wordCount\":316,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/DNSScavenging.png\",\"keywords\":[\"active directory integrated dns\",\"AD integrated\",\"ADI\",\"ADI DNS\",\"dns\",\"monitoring\",\"scavenging\",\"SCOM\",\"Windows\"],\"articleSection\":[\"Administration\",\"Authoring\",\"Best Practice\",\"MP Management Pack\",\"SCOM\",\"Windows\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/\",\"name\":\"DNS Scavenging alerts - Kevin Justin&#039;s Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/DNSScavenging.png\",\"datePublished\":\"2024-08-28T20:45:53+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Post to set up DNS scavenging and monitoring, including testing and PowerShell commands to see alert outputs, reports, etc.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/DNSScavenging.png\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/DNSScavenging.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/08\\\/28\\\/dns-scavenging-alerts\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DNS Scavenging alerts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin&#039;s Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DNS Scavenging alerts - Kevin Justin&#039;s Blog","description":"Post to set up DNS scavenging and monitoring, including testing and PowerShell commands to see alert outputs, reports, etc.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/","og_locale":"en_US","og_type":"article","og_title":"DNS Scavenging alerts - Kevin Justin&#039;s Blog","og_description":"Post to set up DNS scavenging and monitoring, including testing and PowerShell commands to see alert outputs, reports, etc.","og_url":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/","og_site_name":"Kevin Justin&#039;s Blog","article_published_time":"2024-08-28T20:45:53+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"DNS Scavenging alerts","datePublished":"2024-08-28T20:45:53+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/"},"wordCount":316,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png","keywords":["active directory integrated dns","AD integrated","ADI","ADI DNS","dns","monitoring","scavenging","SCOM","Windows"],"articleSection":["Administration","Authoring","Best Practice","MP Management Pack","SCOM","Windows"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/","url":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/","name":"DNS Scavenging alerts - Kevin Justin&#039;s Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png","datePublished":"2024-08-28T20:45:53+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Post to set up DNS scavenging and monitoring, including testing and PowerShell commands to see alert outputs, reports, etc.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/08\/DNSScavenging.png"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2024\/08\/28\/dns-scavenging-alerts\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"DNS Scavenging alerts"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin&#039;s Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20427","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=20427"}],"version-history":[{"count":6,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20427\/revisions"}],"predecessor-version":[{"id":20438,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20427\/revisions\/20438"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=20427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=20427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=20427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}