AdFind

MITRE

Malware Type:
Tool

First seen:
Unknown

Last seen:
Unknown

Details:

[AdFind](https://attack.mitre.org/software/S0552) is a free command-line query tool that can be used for gathering information from Active Directory.(Citation: Red Canary Hospital Thwarted Ryuk October 2020)(Citation: FireEye FIN6 Apr 2019)(Citation: FireEye Ryuk and Trickbot January 2019)

Associated Techniques (5)

ID	ATT&CK	Tactics
T1016	System Network Configuration Discovery	-
T1018	Remote System Discovery	-
T1069.002	Domain Groups	-
T1087.002	Domain Account	-
T1482	Domain Trust Discovery	-

Used by Actors (12)

Akira
Unknown

APT29
Nation-state

BlackByte
Unknown

FIN6
Unknown

FIN7
Criminal

INC Ransom
Unknown

Lotus Blossom
Unknown

menuPass
Unknown

MUSTANG PANDA
Nation-state

Play
Unknown

Metadata

ID:	781
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00