Tool: Nltest

Description

[Nltest](https://attack.mitre.org/software/S0359) is a Windows command-line utility used to list domain controllers and enumerate domain trusts.(Citation: Nltest Manual)

External References

• mitre-attack
• Nltest Manual

Techniques Used by This Tool

• T1016 — System Network Configuration Discovery
• T1018 — Remote System Discovery
• T1482 — Domain Trust Discovery

APT Groups Using This Tool

• Wizard Spider
• Earth Lusca
• Play
• Volt Typhoon
• INC Ransom
• FIN8