ATT&CK ReferencesFortinet TrickBot

Fortinet TrickBot

Bacurio Jr., F. and Salvio, J. (2018, April 9). Trickbot’s New Reconnaissance Plugin. Retrieved February 14, 2019.

Techniques0

Not cited by any technique.

None recorded.

None recorded.

None recorded.

Technique	Used by	Procedure example
T1482 Domain Trust Discovery	MalwareTrickBot	TrickBot can gather information about domain trusts by utilizing Nltest. Cyberreason Anchor December 2019 Fortinet TrickBot
T1482 Domain Trust Discovery	ToolNltest	Nltest may be used to enumerate trusted domains by using commands such as `nltest /domain_trusts`. Fortinet TrickBot Nltest Manual

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.