Tag
low
advisory
Enumerating Domain Trusts via DSQUERY.EXE
2 rules 2 TTPsAdversaries may use the `dsquery.exe` command-line utility to enumerate trust relationships for lateral movement in Windows multi-domain environments.
Microsoft Defender XDR
discovery
domain-trust
windows
2r
2t
low
advisory
Enumerating Domain Trusts via DSQUERY.EXE
2 rules 2 TTPsAdversaries may use dsquery.exe to enumerate domain trusts, which can be leveraged for lateral movement in Windows multi-domain environments.
Windows +1
discovery
domain-trust
2r
2t
low
advisory
NLTEST.EXE Used for Domain Trust Discovery
2 rules 2 TTPsAdversaries may use `nltest.exe` to enumerate domain trusts, gaining insight into trust relationships and the state of Domain Controller replication within a Windows NT Domain, potentially leading to lateral movement.
Windows Server +1
discovery
windows
nltest
domain-trust
2r
2t