Microsoft has released Sysmon 10.0, or System Monitor, a Sysinternals tool that allows you to monitor for certain activity on a computer and log it to the Windows Event Viewer. This feature will allow users to log DNS queries performed on a monitored computer, which will also include the executable that performed the query. This event needs to be enabled through a configuration file with the DNSQuery directive. This configuration file can be installed using thesysmon.exe -i config.xml, if not installed yet, or sysmon is not installed.
Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-sysmon-10-with-dns-query-logging-feature/