Nltest — Malware Profile
Nltest is a Windows command-line utility used to list domain controllers and enumerate domain trusts.
MITRE ATT&CK techniques (3)
- T1016 System Network Configuration Discovery
- T1018 Remote System Discovery
- T1482 Domain Trust Discovery
IntelFusions coverage
- Hackers stack six remote-access tools on N-able servers 2026-08-05
- New Rust backdoor takes its orders from GitHub 2026-08-17
Attributed threat actors
- Volt Typhoon
- AvosLocker machine-inferred link
- Storm-0501
- MirrorFace
- INC Ransom
- Earth Lusca
- Conti
- Play Ransomware
- FIN8