AWS Route53 Resolver

Scanner supports AWS Route53 Resolver logs, which contain information about DNS queries. In order for Scanner to see these logs, you can configure Route53 to publish them to S3.

Step 1: Configure Route53 Resolver to write logs to S3

You can follow the AWS documentation to configure the Route53 Resolver to write DNS query logs to an S3 bucket. See: Resolver query logging.

Step 2: Ingest via Scanner Collect

Follow the Custom Logs - AWS S3 guide to ingest logs from S3 via Scanner Collect.