Nltest is a Windows command-line utility used to list domain controllers and enumerate domain trusts.
| Technique | Procedure example |
|---|---|
| T1016 System Network Configuration Discovery |
Nltest may be used to enumerate the parent domain of a local machine using |
| T1018 Remote System Discovery |
Nltest may be used to enumerate remote domain controllers using options such as |
| T1482 Domain Trust Discovery |
Nltest may be used to enumerate trusted domains by using commands such as |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
