Skip to content

windows_domain_group

Description

  • Domain group members

Notes

Note

  • Requires a domain account to collect data.
  • Requires the target node to have RSAT tools installed (you can install them via the PowerShell command Add-WindowsCapability -online -Name "Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0"))
  • It is suggested to run this all domain plugins on a single machine to avoid repeated results (use an hosts file with a single windows domain target node).

Configuration

[windows_domain_group]
enabled = false
Name Options Default Description
enabled true/false false Plugin status
group_name string Domain Admins Group to be queried for members

Returned values

"windows_domain_group": [
    {
        "Name":  "Administrator",
        "ObjectClass":  "user"
    }
],
Key Description
Name Member name
ObjectClass Member type (User/Group)

MITRE ATT&CK Mapping

Authors