.. /
query.exe
Displays information about processes, sessions, and Remote Desktop Session Host servers
Sessions
List listeners and interactive sessions
query.exe session /server:W10.ad.bitsadmin.com
Usecase
Reconnaissance on currently active sessions
Comments
Equivalent to qwinsta.exe
List logged in users
query.exe user /server:W10.ad.bitsadmin.com
Usecase
Reconnaissance on currently active users
Comments
Equivalent to quser.exe
List terminal servers on the network
query.exe termserver
Comments
Equivalent to qappsrv.exe
Processes
List all processes
query.exe process /server:W10.ad.bitsadmin.com *
Usecase
Reconnaissance on running processes
Comments
Equivalent to qprocess.exe
Mitre Att&ck
T1057
List all processes
query.exe process /server:W10.ad.bitsadmin.com keepass.exe
Usecase
Identify specific running process
Comments
Equivalent to qprocess.exe
Mitre Att&ck
T1057