Active Directory reconnaissance
Named by 1 kept item in this workspace.
Search every workspace for Active Directory reconnaissance. It matches the name as written, so it can find other things that share it.
The items that name it 1
Threat actors used nltest.exe to enumerate potential Active Directory assets as post-exploitation activity.
All techniques in this workspace.