Does the network resolution datamodel includes both Outbound and Inbound DNS transfers?
The datamodel includes query_type field so depending on your source, its configuration and the add-on you're using for data ingestion, I suppose it might include AXFR or IXFR. But I'd test before relying on it.
