Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 02:04:53 UTC
Home > List all groups > List all tools > List all groups using tool AdFind
 Tool: AdFind
Names AdFind
Category Tools
Type Info stealer
Description
Command line Active Directory query tool. Mixture of ldapsearch, search.vbs, ldp,
dsquery, and dsget tools with a ton of other cool features thrown in for good measure.
This tool proceeded dsquery/dsget/etc by years though I did adopt some of the useful
stuff from those tools.
Information MITRE ATT&CK Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool AdFind
Changed Name Country Observed
APT groups
 APT 29, Cozy Bear, The Dukes 2008-Feb 2025
 Mustang Panda, Bronze President 2012-Jun 2025
 Traveling Spider [Unknown] 2019-Mar 2021
 UNC215 2019
 UNC2447 [Unknown] 2020
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4a6285af-8694-43b1-8300-74afd8f0a835
Page 1 of 2

Wizard Spider, Gold Blackburn 2014-May 2025
6 groups listed (6 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4a6285af-8694-43b1-8300-74afd8f0a835
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4a6285af-8694-43b1-8300-74afd8f0a835
Page 2 of 2