# CITADELLE SECURITY OPERATIONS — DNS resolver export
# Training data. Rows may not be in capture order.
# Format: timestamp client record query response
2026-07-27T09:14:23Z 10.20.8.14 TXT 04-bHVlIHBhaXJzLgoKTmV4dCBl.exfil.training.local NOERROR
2026-07-27T09:14:16Z 10.20.8.14 TXT 03-aXRlbXMgdXNpbmcga2V5LXZh.exfil.training.local NOERROR
2026-07-27T09:14:09Z 10.20.8.14 TXT 02-Y3R1cmUgdGhhdCBzdG9yZXMg.exfil.training.local NOERROR
2026-07-27T09:14:29Z 10.20.6.42 TXT status.telemetry.training.local NOERROR
2026-07-27T09:15:22Z 10.20.4.21 A help.citadelle.local 10.20.2.22
2026-07-27T09:14:02Z 10.20.8.14 TXT 01-SSBhbSBhIFB5dGhvbiBzdHJ1.exfil.training.local NOERROR
2026-07-27T09:15:37Z 10.20.8.14 TXT 06-ZWxsZSBjaGF0Ym90Lg==.exfil.training.local NOERROR
2026-07-27T09:14:13Z 10.20.3.9 A analytics.training.local 192.0.2.30
2026-07-27T09:13:53Z 10.20.4.21 AAAA updates.training.local NOERROR
2026-07-27T09:15:30Z 10.20.8.14 TXT 05-dmlkZW5jZTogdGhlIENpdGFk.exfil.training.local NOERROR
2026-07-27T09:15:04Z 10.20.8.14 A gateway.citadelle.local 10.20.1.1
2026-07-27T09:14:21Z 10.20.4.21 A mail.citadelle.local 10.20.2.15
2026-07-27T09:14:05Z 10.20.4.21 A cdn.training.local 192.0.2.18
2026-07-27T09:13:50Z 10.20.8.14 A portal.citadelle.local 10.20.2.8
2026-07-27T09:14:54Z 10.20.6.42 TXT U29mdHdhcmVVcGRhdGU=.telemetry.training.local NOERROR
2026-07-27T09:15:58Z 10.20.8.14 A portal.citadelle.local 10.20.2.8