Nltest
Nltest is a Windows command-line utility used to list domain controllers and enumerate domain trusts.[1]
ID: S0359
Type: TOOL
Platforms: Windows
Version: 1.0
Techniques Used
| Domain | ID | Name | Use |
|---|---|---|---|
| Enterprise | T1482 | Domain Trust Discovery | Nltest may be used to enumerate trusted domains by using commands such as nltest /domain_trusts.[1][2] |
| Enterprise | T1018 | Remote System Discovery | Nltest may be used to enumerate remote domain controllers using options such as /dclist and /dsgetdc.[1] |
| Enterprise | T1016 | System Network Configuration Discovery | Nltest may be used to enumerate the parent domain of a local machine using /parentdomain.[1] |