docs: def _dns_weird(self, record):
          """Look for weird stuff in dns record using a set of criteria to mark the weird stuff"""
          weird = {}
  
          # Zero should always be 0
          if record['flags']['zero'] != 0:
              weird['zero'] = record['flags']['zero']
  
          # Trucated may indicate an exfil
          if record['flags']['truncated']:
              weird['trucnated'] = True
  
          # Weird Query Types
          weird_types = set(['DNS_NULL', 'DNS_HINFO', 'DNS_TXT', 'UNKNOWN'])
          for query in record['queries']:
              if query['type'] in weird_types:
                  weird['query_type'] = query['type']
  
          # Weird Query Classes
          weird_classes = set(['DNS_CHAOS', 'DNS_HESIOD', 'DNS_NONE', 'DNS_ANY'])
          for query in record['queries']:
              if query['class'] in weird_classes:
                  weird['query_class'] = query['class']
  
          # Weird Answer Types
          for section_name in ['answers', 'name_servers', 'additional']:
              for answer in record['answers'][section_name]:
                  if answer['type'] in weird_types:
                      weird['answer_type'] = answer['type']
  
          # Weird Answer Classes
          for section_name in ['answers', 'name_servers', 'additional']:
              for answer in record['answers'][section_name]:
                  if answer['class'] in weird_classes:
                      weird['answer_class'] = answer['class']
  
          # Is the subdomain name especially long or have high entropy?
          for query in record['queries']:
              subdomain = '.'.join(query['name'].split('.')[:-2])
              length = len(subdomain)
              entropy = self.entropy(subdomain)
              if length > 35 and entropy > 3.5:
                  weird['subdomain_length'] = length
                  weird['subdomain'] = subdomain
                  weird['subdomain_entropy'] = entropy
                  weird['subdomain'] = subdomain
  
          # Return the weird stuff
          return weird