Suspicious DNS Server Config Error - ServerLevelPluginDLL issue

rules/windows/builtin/win_sups_dns_config.yml

@@ -0,0 +1,18 @@
+title: DNS Server Error Failed Loading the ServerLevelPluginDLL
+description: This rule detects a DNS server error in which a specified plugin DLL (in registry) could not be loaded
+status: experimental
+reference: 
+    - https://medium.com/@esnesenon/feature-not-bug-dnsadmin-to-dc-compromise-in-one-line-a0f779b8dc83
+    - https://technet.microsoft.com/en-us/library/cc735829(v=ws.10).aspx
+author: Florian Roth
+logsource:
+    product: windows
+    service: dns-server
+detection:
+    selection:
+        EventID: 150
+    condition: selection and not filter
+falsepositives: 
+    - Unknown
+level: critical
+