Skip to content

Instantly share code, notes, and snippets.

@randomvariable
Last active November 28, 2021 22:09
Show Gist options
  • Star 4 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save randomvariable/be90107fd57a4f9502af2eba62978fb6 to your computer and use it in GitHub Desktop.
Save randomvariable/be90107fd57a4f9502af2eba62978fb6 to your computer and use it in GitHub Desktop.
DNS Client Logging on Windows
function Start-DNSClientLog {
$DnsOpLog = Get-WinEvent -ListLog Microsoft-Windows-DNS-Client/Operational
$DnsOpLog.IsEnabled = $true
$DnsOpLog.SaveChanges()
}
function Get-DNSClientQueries {
foreach($event in (get-winevent Microsoft-Windows-DNS-Client/Operational | % { [xml]$_.ToXml() })) {
$Query = ($event.Event.EventData.Data | Where-Object { $_.Name -eq "QueryName" }).'#text'
if($null -eq $Query) { return }
New-Object PSObject -Property @{
"Date" = [DateTime]$event.Event.System.TimeCreated.SystemTime;
"Query" = $Query
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment