malcachesnoop

Compare an updated malhost list to a DNS servers cache.
Used to check internal DNS servers for signs of mal-ware on the network.

malcachesnoop downloads the latest Mayhemic Labs list and uses that to check for entries in a DNS server's cache looking for the presence of malware.

Example:

./malcachesnoop 8.8.8.8