1id: ptr-fingerprint 2 3info: 4 name: PTR Fingerprint 5 author: pdteam 6 severity: info 7 tags: dns,ptr 8 9dns: 10 - name: "{{FQDN}}" 11 type: PTR 12 13 matchers: 14 - type: word 15 words: 16 - "IN\tPTR" 17 18 extractors: 19 - type: regex 20 group: 1 21 regex: 22 - "IN\tPTR\t(.+)" 23