good idea in that thread: If you don't have a backup of your zone files, a good way to quickly pick up the main domains being used would be to turn on logging

good idea in that thread: If you don't have a backup of your zone files, a good way to quickly pick up the main domains being used would be to turn on logging for your DNS server and output into a log collector. That way you can quickly build queries on which IPs are asking for which FQDNs and start rebuilding a list of your lost zones and can maybe do some guess-work on which IPs those FQDNs were likely to resolve to. I would expect irregular or extremely infrequent processes that use specific FQDNs will pop up from time to time as errors/failed processes and should prime IT teams on what to look out for. https://www.reddit.com/r/sysadmin/comments/ma4mwl/the_absolute_worst_case_scenario_happened_what/grr3tgo/ https://www.reddit.com/r/sysadmin/comments/ma4mwl/the_absolu...