Nltest
- ID
- S0359
- Type
- Tool
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 12 May 2026
Nltest is a Windows command-line utility used to list domain controllers and enumerate domain trusts.[1]
Techniques used (3)
- T1016 System Network Configuration Discovery
- T1018 Remote System Discovery
- T1482 Domain Trust Discovery
Groups using it (8)
- G0061 FIN8
- G0102 Wizard Spider
- G1006 Earth Lusca
- G1017 Volt Typhoon
- G1032 INC Ransom
- G1040 Play
- G1053 Storm-0501
- G1054 MirrorFace