..
    generated, remove this comment to keep this file

``ad.users``
============

.. code-block:: console

    $ target-query <path/to/target> -f ad.users


.. list-table:: Details
    :widths: 20 80

    * - Module
      - ``dissect.target.plugins.os.windows.ad.ntds.NtdsPlugin``
    * - Output
      - ``records``

**Module documentation**

Plugin to parse NTDS.dit Active Directory database and extract user credentials.

This plugin extracts user password hashes, password history, Kerberos keys, and other authentication data
from the NTDS.dit database found on Windows Domain Controllers.

**Function documentation**

Extract all user accounts from the NTDS.dit database.