{"resources":{"nextdns":{"id":"nextdns","name":"nextdns","fields":{"account":{"name":"account","type":"\u001bnextdns.account","title":"Account that owns the configured API key","provider":"go.mondoo.com/mql/providers/nextdns"},"profile":{"name":"profile","type":"\u001bnextdns.profile","title":"NextDNS profile","desc":"Examine a single NextDNS configuration profile: its security feeds, privacy blocklists, parental-control rules, allow and deny lists, custom DNS rewrites, logging settings, and setup endpoints. Select a profile by `id`, for example `nextdns.profiles.where(id == \"abc123\")`.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"profiles":{"name":"profiles","type":"\u0019\u001bnextdns.profile","title":"All profiles in the account","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS","desc":"Use this resource to access the NextDNS account behind the configured API key and the DNS profiles it owns. Query `profiles` to enumerate every profile, or `account` for the account that owns them.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.account":{"id":"nextdns.account","name":"nextdns.account","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Stable account fingerprint derived from the API key","provider":"go.mondoo.com/mql/providers/nextdns"},"profiles":{"name":"profiles","type":"\u0019\u001bnextdns.profile","title":"Profiles owned by this account","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS account","desc":"Examine the NextDNS account associated with the configured API key. The account groups the DNS `profiles` it owns. NextDNS exposes no account object of its own, so the `id` is a stable fingerprint derived from the API key.","private":true,"min_provider_version":"13.0.0","defaults":"id","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile":{"id":"nextdns.profile","name":"nextdns.profile","fields":{"account":{"name":"account","type":"\u001bnextdns.account","title":"Account that owns this profile","provider":"go.mondoo.com/mql/providers/nextdns"},"allowlist":{"name":"allowlist","type":"\u0019\u001bnextdns.profile.allowlistEntry","title":"Manually allowed domains","provider":"go.mondoo.com/mql/providers/nextdns"},"allowlistEntry":{"name":"allowlistEntry","type":"\u001bnextdns.profile.allowlistEntry","title":"NextDNS allowlist entry","desc":"Examine a single manually allowed domain. The `id` field is the domain itself (for example \"cdn.example.com\") and `active` reports whether the allow rule is currently enforced.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"blocklist":{"name":"blocklist","type":"\u001bnextdns.profile.blocklist","title":"NextDNS privacy blocklist","desc":"Examine a single blocklist enabled on a profile. Select a blocklist by `id` (for example \"nextdns-recommended\"); `entries` reports the number of domains and `updatedOn` the last time the source was refreshed.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"denylist":{"name":"denylist","type":"\u0019\u001bnextdns.profile.denylistEntry","title":"Manually blocked domains","provider":"go.mondoo.com/mql/providers/nextdns"},"denylistEntry":{"name":"denylistEntry","type":"\u001bnextdns.profile.denylistEntry","title":"NextDNS denylist entry","desc":"Examine a single manually blocked domain. The `id` field is the domain itself (for example \"ads.example.com\") and `active` reports whether the block is currently enforced.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"fingerprint":{"name":"fingerprint","type":"\u0007","is_mandatory":true,"title":"Profile fingerprint used to link devices","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Profile identifier (for example \"abc123\")","provider":"go.mondoo.com/mql/providers/nextdns"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Display name of the profile","provider":"go.mondoo.com/mql/providers/nextdns"},"parentalControl":{"name":"parentalControl","type":"\u001bnextdns.profile.parentalControl","title":"Service, category, and safe-search restrictions","provider":"go.mondoo.com/mql/providers/nextdns"},"privacy":{"name":"privacy","type":"\u001bnextdns.profile.privacy","title":"Blocklists, native tracker blocking, and tracker settings","provider":"go.mondoo.com/mql/providers/nextdns"},"rewrite":{"name":"rewrite","type":"\u001bnextdns.profile.rewrite","title":"NextDNS custom DNS rewrite","desc":"Examine a single custom DNS rewrite. The `name` field is the rewritten domain, `type` the record type (for example A, AAAA, or CNAME), and `content` the answer the resolver returns.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"rewrites":{"name":"rewrites","type":"\u0019\u001bnextdns.profile.rewrite","title":"Custom DNS rewrites","provider":"go.mondoo.com/mql/providers/nextdns"},"security":{"name":"security","type":"\u001bnextdns.profile.security","title":"Threat-intelligence, safe-browsing, and TLD blocking settings","provider":"go.mondoo.com/mql/providers/nextdns"},"settings":{"name":"settings","type":"\u001bnextdns.profile.settings","title":"Logging, block page, and performance settings","provider":"go.mondoo.com/mql/providers/nextdns"},"setup":{"name":"setup","type":"\u001bnextdns.profile.setup","title":"Linked IP, DNSCrypt, and resolver endpoints","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS profile","desc":"Examine a single NextDNS configuration profile: its security feeds, privacy blocklists, parental-control rules, allow and deny lists, custom DNS rewrites, logging settings, and setup endpoints. Select a profile by `id`, for example `nextdns.profiles.where(id == \"abc123\")`.","private":true,"min_provider_version":"13.0.0","defaults":"id name","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.allowlistEntry":{"id":"nextdns.profile.allowlistEntry","name":"nextdns.profile.allowlistEntry","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the allow rule is currently active","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Allowed domain (for example \"cdn.example.com\")","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS allowlist entry","desc":"Examine a single manually allowed domain. The `id` field is the domain itself (for example \"cdn.example.com\") and `active` reports whether the allow rule is currently enforced.","private":true,"min_provider_version":"13.0.0","defaults":"id active","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.blocklist":{"id":"nextdns.profile.blocklist","name":"nextdns.profile.blocklist","fields":{"entries":{"name":"entries","type":"\u0005","is_mandatory":true,"title":"Number of domain entries in the blocklist","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Blocklist identifier (for example \"nextdns-recommended\")","provider":"go.mondoo.com/mql/providers/nextdns"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Human-readable blocklist name","provider":"go.mondoo.com/mql/providers/nextdns"},"updatedOn":{"name":"updatedOn","type":"\t","is_mandatory":true,"title":"Time the blocklist source was last updated","provider":"go.mondoo.com/mql/providers/nextdns"},"website":{"name":"website","type":"\u0007","is_mandatory":true,"title":"Website describing the blocklist source","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS privacy blocklist","desc":"Examine a single blocklist enabled on a profile. Select a blocklist by `id` (for example \"nextdns-recommended\"); `entries` reports the number of domains and `updatedOn` the last time the source was refreshed.","private":true,"min_provider_version":"13.0.0","defaults":"id name entries","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.denylistEntry":{"id":"nextdns.profile.denylistEntry","name":"nextdns.profile.denylistEntry","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the block is currently active","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Blocked domain (for example \"ads.example.com\")","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS denylist entry","desc":"Examine a single manually blocked domain. The `id` field is the domain itself (for example \"ads.example.com\") and `active` reports whether the block is currently enforced.","private":true,"min_provider_version":"13.0.0","defaults":"id active","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.parentalControl":{"id":"nextdns.profile.parentalControl","name":"nextdns.profile.parentalControl","fields":{"blockBypass":{"name":"blockBypass","type":"\u0004","is_mandatory":true,"title":"Whether end users are allowed to bypass blocks","provider":"go.mondoo.com/mql/providers/nextdns"},"categories":{"name":"categories","type":"\u0019\u001bnextdns.profile.parentalControl.category","is_mandatory":true,"title":"Blocked or recreation-restricted content categories","provider":"go.mondoo.com/mql/providers/nextdns"},"category":{"name":"category","type":"\u001bnextdns.profile.parentalControl.category","title":"NextDNS parental-control category rule","desc":"Examine a single content-category rule (for example \"porn\" or \"gambling\"). Select it by `id`; `active` reports whether the category is blocked and `recreation` whether it is allowed only during the recreation schedule.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"recreationTimes":{"name":"recreationTimes","type":"\n","is_mandatory":true,"title":"Recreation schedule keyed by weekday, each with \"start\" and \"end\" times","provider":"go.mondoo.com/mql/providers/nextdns"},"recreationTimezone":{"name":"recreationTimezone","type":"\u0007","is_mandatory":true,"title":"Timezone the recreation schedule is evaluated in (for example \"America/New_York\")","provider":"go.mondoo.com/mql/providers/nextdns"},"safeSearch":{"name":"safeSearch","type":"\u0004","is_mandatory":true,"title":"Whether SafeSearch is enforced for supported search engines","provider":"go.mondoo.com/mql/providers/nextdns"},"service":{"name":"service","type":"\u001bnextdns.profile.parentalControl.service","title":"NextDNS parental-control service rule","desc":"Examine a single service rule (for example \"tiktok\" or \"youtube\"). Select it by `id`; `active` reports whether the service is blocked and `recreation` whether it is allowed only during the recreation schedule.","is_private":true,"provider":"go.mondoo.com/mql/providers/nextdns","is_implicit_resource":true},"services":{"name":"services","type":"\u0019\u001bnextdns.profile.parentalControl.service","is_mandatory":true,"title":"Blocked or recreation-restricted services","provider":"go.mondoo.com/mql/providers/nextdns"},"youtubeRestrictedMode":{"name":"youtubeRestrictedMode","type":"\u0004","is_mandatory":true,"title":"Whether YouTube Restricted Mode is enforced","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS profile parental-control settings","desc":"Examine the parental-control posture of a profile: blocked `services` and `categories`, the SafeSearch and YouTube Restricted Mode toggles, whether users may bypass blocks, and the recreation-time schedule during which recreation-flagged services and categories are allowed.","private":true,"min_provider_version":"13.0.0","defaults":"safeSearch youtubeRestrictedMode blockBypass","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.parentalControl.category":{"id":"nextdns.profile.parentalControl.category","name":"nextdns.profile.parentalControl.category","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the category is blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Category identifier (for example \"porn\")","provider":"go.mondoo.com/mql/providers/nextdns"},"recreation":{"name":"recreation","type":"\u0004","is_mandatory":true,"title":"Whether the category is allowed only during the recreation schedule","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS parental-control category rule","desc":"Examine a single content-category rule (for example \"porn\" or \"gambling\"). Select it by `id`; `active` reports whether the category is blocked and `recreation` whether it is allowed only during the recreation schedule.","private":true,"min_provider_version":"13.0.0","defaults":"id active recreation","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.parentalControl.service":{"id":"nextdns.profile.parentalControl.service","name":"nextdns.profile.parentalControl.service","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the service is blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Service identifier (for example \"tiktok\")","provider":"go.mondoo.com/mql/providers/nextdns"},"recreation":{"name":"recreation","type":"\u0004","is_mandatory":true,"title":"Whether the service is allowed only during the recreation schedule","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS parental-control service rule","desc":"Examine a single service rule (for example \"tiktok\" or \"youtube\"). Select it by `id`; `active` reports whether the service is blocked and `recreation` whether it is allowed only during the recreation schedule.","private":true,"min_provider_version":"13.0.0","defaults":"id active recreation","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.privacy":{"id":"nextdns.profile.privacy","name":"nextdns.profile.privacy","fields":{"allowAffiliate":{"name":"allowAffiliate","type":"\u0004","is_mandatory":true,"title":"Whether affiliate and tracking links are allowed","provider":"go.mondoo.com/mql/providers/nextdns"},"blocklists":{"name":"blocklists","type":"\u0019\u001bnextdns.profile.blocklist","is_mandatory":true,"title":"Enabled blocklists","provider":"go.mondoo.com/mql/providers/nextdns"},"disguisedTrackers":{"name":"disguisedTrackers","type":"\u0004","is_mandatory":true,"title":"Whether disguised third-party trackers (CNAME cloaking) are blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"natives":{"name":"natives","type":"\u0019\u0007","is_mandatory":true,"title":"Native tracking endpoints blocked by ecosystem (for example \"apple\")","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS profile privacy settings","desc":"Examine the tracker- and ad-blocking configuration of a profile: the enabled `blocklists`, the native-tracking endpoints blocked per device ecosystem, disguised-tracker (CNAME-cloaking) protection, and whether affiliate and tracking links are allowed.","private":true,"min_provider_version":"13.0.0","defaults":"disguisedTrackers allowAffiliate","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.rewrite":{"id":"nextdns.profile.rewrite","name":"nextdns.profile.rewrite","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Answer returned for the domain (for example an IP address or hostname)","provider":"go.mondoo.com/mql/providers/nextdns"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rewrite identifier assigned by NextDNS","provider":"go.mondoo.com/mql/providers/nextdns"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Domain the rewrite applies to","provider":"go.mondoo.com/mql/providers/nextdns"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Record type (for example A, AAAA, or CNAME)","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS custom DNS rewrite","desc":"Examine a single custom DNS rewrite. The `name` field is the rewritten domain, `type` the record type (for example A, AAAA, or CNAME), and `content` the answer the resolver returns.","private":true,"min_provider_version":"13.0.0","defaults":"name type content","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.security":{"id":"nextdns.profile.security","name":"nextdns.profile.security","fields":{"aiThreatDetection":{"name":"aiThreatDetection","type":"\u0004","is_mandatory":true,"title":"Whether AI-driven threat detection is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"cryptojacking":{"name":"cryptojacking","type":"\u0004","is_mandatory":true,"title":"Whether cryptojacking protection is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"csam":{"name":"csam","type":"\u0004","is_mandatory":true,"title":"Whether child sexual abuse material (CSAM) blocking is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"ddns":{"name":"ddns","type":"\u0004","is_mandatory":true,"title":"Whether dynamic DNS hostnames are blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"dga":{"name":"dga","type":"\u0004","is_mandatory":true,"title":"Whether domain-generation-algorithm (DGA) protection is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"dnsRebinding":{"name":"dnsRebinding","type":"\u0004","is_mandatory":true,"title":"Whether DNS rebinding protection is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"googleSafeBrowsing":{"name":"googleSafeBrowsing","type":"\u0004","is_mandatory":true,"title":"Whether Google Safe Browsing is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"idnHomographs":{"name":"idnHomographs","type":"\u0004","is_mandatory":true,"title":"Whether internationalized-domain-name homograph protection is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"nrd":{"name":"nrd","type":"\u0004","is_mandatory":true,"title":"Whether newly registered domains (NRD) are blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"parking":{"name":"parking","type":"\u0004","is_mandatory":true,"title":"Whether domain parking pages are blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"threatIntelligenceFeeds":{"name":"threatIntelligenceFeeds","type":"\u0004","is_mandatory":true,"title":"Whether NextDNS threat intelligence feeds are enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"tlds":{"name":"tlds","type":"\u0019\u0007","is_mandatory":true,"title":"Blocked top-level domains (for example \"pw\" or \"xyz\")","provider":"go.mondoo.com/mql/providers/nextdns"},"typosquatting":{"name":"typosquatting","type":"\u0004","is_mandatory":true,"title":"Whether typosquatting protection is enabled","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS profile security settings","desc":"Examine the threat-protection features enabled on a profile: threat intelligence feeds, AI-driven threat detection, Google Safe Browsing, cryptojacking and DNS-rebinding protection, typosquatting and homograph defenses, newly-registered-domain blocking, and the list of blocked top-level domains.","private":true,"min_provider_version":"13.0.0","defaults":"aiThreatDetection googleSafeBrowsing nrd","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.settings":{"id":"nextdns.profile.settings","name":"nextdns.profile.settings","fields":{"blockBypassMethods":{"name":"blockBypassMethods","type":"\u0004","is_mandatory":true,"title":"Whether block-bypass methods (VPNs, proxies, Tor, and public resolvers used to circumvent NextDNS) are blocked","provider":"go.mondoo.com/mql/providers/nextdns"},"blockPageEnabled":{"name":"blockPageEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the NextDNS block page is shown for blocked domains","provider":"go.mondoo.com/mql/providers/nextdns"},"cacheBoost":{"name":"cacheBoost","type":"\u0004","is_mandatory":true,"title":"Whether cache boost is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"cnameFlattening":{"name":"cnameFlattening","type":"\u0004","is_mandatory":true,"title":"Whether CNAME flattening is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"ecs":{"name":"ecs","type":"\u0004","is_mandatory":true,"title":"Whether EDNS Client Subnet (ECS) is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"logsDropDomain":{"name":"logsDropDomain","type":"\u0004","is_mandatory":true,"title":"Whether queried domains are dropped from logs","provider":"go.mondoo.com/mql/providers/nextdns"},"logsDropIp":{"name":"logsDropIp","type":"\u0004","is_mandatory":true,"title":"Whether client IP addresses are dropped from logs","provider":"go.mondoo.com/mql/providers/nextdns"},"logsEnabled":{"name":"logsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether query logging is enabled","provider":"go.mondoo.com/mql/providers/nextdns"},"logsLocation":{"name":"logsLocation","type":"\u0007","is_mandatory":true,"title":"Log storage region (for example \"us\" or \"eu\")","provider":"go.mondoo.com/mql/providers/nextdns"},"logsRetention":{"name":"logsRetention","type":"\u0005","is_mandatory":true,"title":"Log retention period in seconds","provider":"go.mondoo.com/mql/providers/nextdns"},"web3":{"name":"web3","type":"\u0004","is_mandatory":true,"title":"Whether Web3 name resolution is enabled","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS profile settings","desc":"Examine the operational settings of a profile: query logging (whether it is enabled, what is retained or dropped, retention period, and storage region), the block page toggle, resolver performance optimizations, and Web3 resolution.","private":true,"min_provider_version":"13.0.0","defaults":"logsEnabled logsLocation web3","provider":"go.mondoo.com/mql/providers/nextdns"},"nextdns.profile.setup":{"id":"nextdns.profile.setup","name":"nextdns.profile.setup","fields":{"dnscrypt":{"name":"dnscrypt","type":"\u0007","is_mandatory":true,"title":"DNSCrypt stamp for the profile","provider":"go.mondoo.com/mql/providers/nextdns"},"ipv4":{"name":"ipv4","type":"\u0019\u0007","is_mandatory":true,"title":"Assigned IPv4 resolver addresses","provider":"go.mondoo.com/mql/providers/nextdns"},"ipv6":{"name":"ipv6","type":"\u0019\u0007","is_mandatory":true,"title":"Assigned IPv6 resolver addresses","provider":"go.mondoo.com/mql/providers/nextdns"},"linkedIp":{"name":"linkedIp","type":"\u0007","is_mandatory":true,"title":"Linked public IP associated with the profile","provider":"go.mondoo.com/mql/providers/nextdns"},"linkedIpDdns":{"name":"linkedIpDdns","type":"\u0007","is_mandatory":true,"title":"Dynamic DNS hostname used to update the linked IP","provider":"go.mondoo.com/mql/providers/nextdns"},"linkedIpServers":{"name":"linkedIpServers","type":"\u0019\u0007","is_mandatory":true,"title":"Resolver servers used for the linked IP","provider":"go.mondoo.com/mql/providers/nextdns"}},"title":"NextDNS profile setup","desc":"Examine the resolver endpoints and linking configuration of a profile: the assigned IPv4 and IPv6 anycast addresses, the DNSCrypt stamp, and the linked-IP configuration used to associate a dynamic public IP with the profile.","private":true,"min_provider_version":"13.0.0","defaults":"dnscrypt","provider":"go.mondoo.com/mql/providers/nextdns"}}}