Potential Recon Activity Via Nltest.EXE (5cc90652-4cbd-4241-aa3b-4b462fa5a248)

Detects nltest commands that can be used for information discovery

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
System Network Configuration Discovery - T1016 (707399d6-ab3e-4963-9315-d9d3818cd6a0)	Attack Pattern	Potential Recon Activity Via Nltest.EXE (5cc90652-4cbd-4241-aa3b-4b462fa5a248)	Sigma-Rules	1
Domain Trust Discovery - T1482 (767dbf9e-df3f-45cb-8998-4903ab5f80c0)	Attack Pattern	Potential Recon Activity Via Nltest.EXE (5cc90652-4cbd-4241-aa3b-4b462fa5a248)	Sigma-Rules	1