The Domain Name System (DNS) is the address book for the entire internet. Your organization's internal DNS knows the IP address for every device on your network. When you request a domain is outside of your network, your request moves through a firewall and onto the internet. Attack techniques such as tunneling and malicious domain generation allow bad actors to utilize the DNS to compromise your network in a way that is difficult to detect and even more difficult to resolve.