dsquery
- ID
- S0105
- Type
- Tool
- Associated names
- dsquery.exe
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 17 Apr 2025
dsquery is a command-line utility that can be used to query Active Directory for information from a system within a domain. [1] It is typically installed only on Windows Server versions but can be installed on non-server variants through the Microsoft-provided Remote Server Administration Tools bundle.
Techniques used (4)
- T1069.002 Domain Groups
- T1082 System Information Discovery
- T1087.002 Domain Account
- T1482 Domain Trust Discovery