The thread tests a scary Windows DNS Client CVE against the actual call path, then finds DnsQueryRaw use only after a DLL proxy and WSL exercise. That makes it worth reading for the attack-surface method, with the caveat that the retained evidence is a social post plus screenshots, not independent exploit validation.