Metrics Library

Find SPF records that are set to 'Soft Fail' with '~all' instead of the best practice 'Hard Fail' with '-all' DNS[?RecordType == TXT && contains(Name, ~all )].Name

This is helpful to someone who's trying to obtain/maintain visibility into the subdomains at an organization. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Also, this Metric could be used to build a domain audit with the intention of an end customer confirming that all looks as expected. SubDomainZones

This is helpful to someone who's trying to obtain/maintain visibility into the email hosting vendor associated with a domain. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Also, if your MSP resells M365, this Metric can be used to create a cross customer report/onboarding report to audit if their email hosting vendor is M365 or not, so that, if not, you can mention that you can sell them licenses to M365. SystemInfo.EmailHostingVendor

Returns a list of TXT records and their values DNS[?RecordType== TXT ].join( , , [Domain, Name]) | sort(@)

Category: Email Security and Domain ManagementDescription:This metric retrieves the Sender Policy Framework (SPF) record for domains managed in the Internet Domain/DNS inspector. It provides details about authorized email senders, ensuring better email authentication and protection against spoofing attacks.Purpose:To validate SPF records and ensure email sender policies are correctly configured for each domain.To prevent email spoofing and improve domain reputation through proper email security configurations.To ensure compliance with email authentication standards like DMARC.How it Works:Queries the EmailSecurityOverview.SpfRecord field to retrieve the SPF record for each domain.Displays the SPF record details, including the authorized email sender domains and IP addresses.Beneficiaries:IT Administrators: To verify and manage domain email authentication configurations.Security Teams: To ensure SPF records are implemented correctly and reduce vulnerabilities to spoofing.Compliance Officers: To verify adherence to email security best practices and organizational policies. EmailSecurityOverview.SpfRecord

Category: Domain Management and Subdomain MonitoringDescription:This metric provides a detailed list of subdomains for each domain managed in the Internet Domain/DNS inspector. It includes key details such as the subdomain name, associated IP address, and whether SSL is enabled.Purpose:To track subdomain configurations and their attributes for improved visibility and security monitoring.To identify subdomains without SSL for prioritizing security updates.To ensure all subdomains are correctly configured and active.How it Works:Queries the Subdomains[] array to retrieve subdomain details, including:Name: The name of the subdomain (e.g., sub.example.com ).IP Address: The associated IP address for the subdomain.SSL Status: Indicates if the subdomain has SSL enabled (true or false).Outputs results in a readable, detailed format.Beneficiaries:IT Administrators: To manage and review subdomain configurations and monitor their status.Security Teams: To identify subdomains without SSL for security updates.Compliance Teams: To ensure subdomains comply with organizational security and operational policies. Subdomains[].[['Name:'target],['IP:'ipaddress],['Has SSL:'subdomainHasSSL],['--']][]

Returns a summary of all CNAME records discovered in DNS inspector DNS[?RecordType== CNAME ].join( -> , [Domain, Name]) | sort(@)

Identifies common Web Hosting platforms like WordPress, PhP etc Website.HTTP.headers."x-powered-by"

This is helpful to someone who's trying to obtain/maintain visibility into a domain's name. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Name

Category: Domain Management and DNS RecordsDescription:This metric provides a comprehensive summary of DNS records for domains managed in the Internet Domain/DNS inspector. It retrieves and organizes details for A, TXT, MX, NS, and SOA records, including the name, record type, and time-to-live (TTL) values.Purpose:To provide a full overview of DNS configurations for domains, ensuring proper record management.To assist with troubleshooting and validating DNS settings across various record types.To maintain compliance with organizational or client DNS policies by offering visibility into all DNS records.How it Works:Queries the following DNS record types and extracts details:A Records: Includes Name, Type, and TTL.TXT Records: Includes Name, Type, and TTL.MX Records: Includes Name, Type, and TTL.NS Records: Includes Name, Type, and TTL.SOA Records: Includes Name, Type, and TTL.Outputs the results in a structured, labeled format with separators for each record type.Beneficiaries:IT Administrators: To validate and manage DNS configurations across various record types.Network Engineers: For troubleshooting DNS issues with detailed insights into records.Compliance Teams: To ensure DNS records align with organizational policies and best practices. ['-DNS A Records-'DNSARecords[].[['Name:'Name],['Type:'RecordType],['Time To Live:'TTL]][],['--'],['-DNS TXT Records-'DNSTXTRecords[].[['Name:'Name],['Type:'RecordType],['Time To Live:'TTL]]][][],['--'],['-DNS MX Records-'DNSMXRecords[].[['Name:'Name],['Type:'RecordType],['Time To Live:'TTL]]][][],['--'],['-DNS NS Records-'DNSNSRecords[].[['Name:'Name],['Type:'RecordType],['Time To Live:'TTL]]][][],['--'],['-DNS SOA Records-'DNSSOARecords[].[['Name:'Name],['Type:'RecordType],['Time To Live:'TTL]]][][]][]