Domain Account Enumeration via net.exe or dsquery.exe

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•2

Detects the use of net.exe and dsquery.exe to enumerate domain user accounts and domain groups. Adversaries often perform this reconnaissance to identify target accounts or privileged groups within an Active Directory environment.