> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/active-directory-entities/dnszone.md).

# DNSZone

| Field             | Type        | Possible Operators                                             | Description                                                                                                                                                                                                                                                         |
| ----------------- | ----------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Guid              | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                                                                                               |
| FSName            | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the `Name of the object` and the `Fully Qualified Domain Name of the Domain`                                                                                                                                   |
| Name              | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Name of the specified object. (**Ldap Display Name**: ou)                                                                                                                                                                                                           |
| risk              | NUMBER      | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the object that calculated based on vulnerability counts and severities.                                                                                                                                                                          |
| DistinguishedName | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Active Directory distinguished name of the object. (**Ldap Display Name**: distinguishedName)                                                                                                                                                                       |
| WhenCreated       | DATE        | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | The date when this object was created. (**Ldap Display Name**: whenCreated)                                                                                                                                                                                         |
| WhenChanged       | DATE        | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | The date when this object was last changed. (**Ldap Display Name**: whenChanged)                                                                                                                                                                                    |
| ExposurePoint     | NUMBER      | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | **ExposurePoint**: A numerical value indicating the level of risk or exposure.                                                                                                                                                                                      |
| AceAuditState     | MULTI\_LIST | IN                                                             | SACL audit coverage of the object's permissions (ACEs): `Full` when every ACE is covered by a success audit rule, `Partial` when some are, `None` when none are. Set only when the scan runs the permission (over-privilege) analysis. Values: None, Partial, Full. |
| Tier              | NUMBER      | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Tier level Forestall assigned to the object: `0` (Tier 0), `1` (Tier 1) or `2` (Tier 2). Lower is more privileged.                                                                                                                                                  |