Nltest

MITRE

Malware Type:
Tool

First seen:
Unknown

Last seen:
Unknown

Details:

[Nltest](https://attack.mitre.org/software/S0359) is a Windows command-line utility used to list domain controllers and enumerate domain trusts.(Citation: Nltest Manual)

Associated Techniques (3)

ID	ATT&CK	Tactics
T1016	System Network Configuration Discovery	-
T1018	Remote System Discovery	-
T1482	Domain Trust Discovery	-

Used by Actors (7)

Earth Lusca
Unknown

FIN8
Unknown

INC Ransom
Unknown

Play
Unknown

Storm-0501
Unknown

Volt Typhoon
Unknown

WIZARD SPIDER
Nation-state

Metadata

ID:	748
Created:	13/01/2026 17:48
Updated:	21/04/2026 04:00