What MITRE ATT&CK T1069.002: Domain Groups (Enterprise Tactic TA0007 - Discovery) requires
MITRE ATT&CK T1069.002 (Domain Groups) is an Enterprise Discovery sub-technique of T1069 (Permission Groups Discovery). Adversaries may attempt to find domain-level groups and permission settings. The knowledge of domain-level permission groups can help adversaries determine which groups exist and which users belong to a particular group. Adversaries may use this information to determine which users have elevated permissions, such as domain administrators. Commands such as net group /domain of the Net utility, dscacheutil -q group on macOS, and ldapsearch on Linux can list domain-level groups. Affected platforms: Linux, macOS, Windows.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1069/002/
SHA-256 integrity: 2058a970748058ab7e4c8adb117e1b3055f0bc28136dfc5bfa08c57e8dcabf7a
Primary Citations — 5 traced to source
- MITRE ATT&CK Technique T1069.002: Domain Groups (https://attack.mitre.org/techniques/T1069/002/)
- MITRE ATT&CK Tactic TA0007: Discovery (https://attack.mitre.org/tactics/TA0007/)
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
⚠ Important: Human Verification Required
Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.