Network Investigation Workspace

Investigate DNS, email, and network issues faster from one command workspace.

Work where your team works

Use NetQuery inside Microsoft 365

Run NetQuery diagnostics directly from Microsoft Teams, Outlook, and Microsoft 365 Copilot.

Explore the Microsoft 365 app

Tool Library

Investigation Tools for Every Layer

Start with high-signal checks first, then drill into deep record diagnostics as needed.

Need an incident playbook? Read Why Are My Emails Going to Spam?.

TLS Certificate and Cipher Analysis

Analyze certificates and cipher suites for robust TLS.

Run

MX Records Lookup and Verification

Check MX records for correct mail routing.

Run

MTA-STS Policy Validator

Validate policy file, DNS, and TLS for secure transport.

Run

SPF Record Checker and Validator

Inspect SPF records to prevent spoofing.

Run

DMARC Record Lookup

Parse DMARC policies and reporting.

Run

DNSSEC Chain of Trust

Check the chain from child to parent to root, and see where it fails.

Run

What is My IP Address

Display your public IP and reverse DNS.

Run

Domain to IP Address Resolution

Resolve a domain to its IP addresses.

Run

New

Forward-Confirmed Reverse DNS (FCrDNS)

New

Confirm PTR hostnames resolve back to the same source IP.

Run

CIDR Range Calculator

New

Convert IPv4 CIDR blocks into masks, ranges, and host counts.

Run

SMTP Capability Probe

New

Scan SMTP servers for TLS and features.

Run

All Tools

CAA Record Lookup

View allowed certificate authorities and reporting URIs.

Run

SRV Record Lookup

Discover service endpoints and ports.

Run

CNAME Record Lookup

Resolve canonical names and pivot to other records.

Run

Authoritative DNS Server Lookup

Find authoritative name servers for a domain.

Run

SOA Record Lookup

View zone authority and timers for a domain.

Run

BIMI Record Verification Tool

Verify BIMI records and logos for mailbox trust.

Run

DKIM Record Checker and Validator

Check DKIM selectors and public keys.

Run

DNS Configuration Validator

Audit DNS settings for consistency.

Run

DS Record Lookup

Retrieve Delegation Signer records with key tags and digests.

Run

DNSKEY Record Lookup

Inspect DNSKEY flags, algorithms, key tags, and key sizes.

Run

RRSIG Record Lookup

Review DNSSEC signature windows and covering record sets.

Run

NSEC Record Lookup

Trace NSEC next-domain links and advertised RR types.

Run

NSEC3PARAM Lookup

See NSEC3 hashing algorithms, iterations, and salts.

Run

Reverse DNS (PTR) Record Lookup

Resolve IP addresses back to hostnames.

Run

ASN Lookup and Information

Retrieve ASNs and organizations for IPs.

Run

ASN to IP Range Lookup

List IP ranges owned by an ASN.

Run

Domain Whois Information Lookup

Fetch registration details for domains.

Run

IP Address Geolocation

Map an IP address to its country.

Run

DNS Blacklist (DNSBL) Lookup

Check if an IP appears on DNS blacklists.

Run

AAAA Record Lookup

Resolve IPv6 addresses for a domain.

Run