Nltest.EXE Execution for Information Discovery

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•18

Detects the execution of 'nltest.exe', a Windows command-line utility that can be used by adversaries for information discovery, specifically to enumerate domain trusts and discover system network configurations.