Hacker - How to identify Time and Date DNS entry change

On a Microsoft domain if you want to understand when a DNS entry was changed you need to:

1. Logon on DC
2. ADSI Edit --> Default naming context
3. You must go to CN=System, CN=MicrosoftDNS and search about relative entry
4. Right Click --> Properties --> searching for Creation date and last modify

in case you want to enable DNS audit log you can read this article:

https://blogs.technet.microsoft.com/networking/2011/08/17/tracking-dns-record-deletion/