DNS Server Error Failed Loading the ServerLevelPluginDLL

Title: DNS Server Error Failed Loading the ServerLevelPluginDLL
Status: test
Description:Detects a DNS server error in which a specified plugin DLL (in registry) could not be loaded
References:
  -https://medium.com/@esnesenon/feature-not-bug-dnsadmin-to-dc-compromise-in-one-line-a0f779b8dc83
  -https://technet.microsoft.com/en-us/library/cc735829(v=ws.10).aspx
  -https://twitter.com/gentilkiwi/status/861641945944391680
Author: Florian Roth (Nextron Systems)
Date: 2017-05-08
modified:2023-02-05
Tags:

• -'attack.privilege-escalation'
• -'attack.persistence'
• -'attack.execution'
• -'attack.stealth'
• -'attack.t1574.001'

Logsource:

• product: windows
• service: dns-server

Detection:
  selection:
    EventID:
      -'150'
      -'770'
      -'771'

  condition:selection
Falsepositives:
  -Unknown
Level: high