All Detections

Windows TrickBot-Style Domain Trust Discovery

avatar
Danny Y@zendannyy
updated Jun 20, 2026005

Detects nltest domain_trusts combined with net view — TrickBot-style AD/network recon.

Sigma