S0105 dsquery
toolEnterpriseplatformsWindows
also known asdsquery · dsquery.exe
dsquery is a command-line utility that can be used to query Active Directory for information from a system within a domain. It is typically installed only on Windows Server versions but can be installed on non-server variants through the Microsoft-provided Remote Server Administration Tools bundle.
01
techniques used (4)
ATT&CK techniques this enables or maps to.
02
used by groups (2)
Threat groups associated with this.
03
used by campaigns (3)
Campaigns that use this.
04
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan