dsquery

MITRE

Malware Type:
Tool

First seen:
Unknown

Last seen:
Unknown

Details:

[dsquery](https://attack.mitre.org/software/S0105) is a command-line utility that can be used to query Active Directory for information from a system within a domain. (Citation: TechNet Dsquery) It is typically installed only on Windows Server versions but can be installed on non-server variants through the Microsoft-provided Remote Server Administration Tools bundle.

Associated Techniques (4)

ID	ATT&CK	Tactics
T1069.002	Domain Groups	-
T1082	System Information Discovery	-
T1087.002	Domain Account	-
T1482	Domain Trust Discovery	-

Aliases (105)

dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe dsquery.exe

Used by Actors (2)

APT41
Nation-state

FIN8
Unknown

Metadata

ID:	720
Created:	13/01/2026 17:48
Updated:	06/03/2026 16:00