> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/active-directory-entities/dnsnode.md).

# DNSNode

A DNS Node is the Active Directory object (`dnsNode`) that backs a single DNS record inside an AD-integrated DNS zone. Every hostname, service record, and IP mapping stored in the directory is one `dnsNode` beneath its `dnsZone`. Forestall enumerates these so DNS records — including planted or spoofed ones like `wpad` or wildcard entries — are visible and searchable alongside the rest of the directory.

### DNS Node Fields

| Field              | Type | Possible Operators                         | Description                                               |
| ------------------ | ---- | ------------------------------------------ | --------------------------------------------------------- |
| FSName             | TEXT | equals, not equals, contains, not contains | The display name of the DNS node object.                  |
| Name               | TEXT | equals, not equals, contains, not contains | The record name (the hostname or label within the zone).  |
| Distinguished Name | TEXT | equals, not equals, contains, not contains | The full LDAP distinguished name of the `dnsNode` object. |