systeminfo

systeminfo is Windows’ built-in host summary: OS name/version/build, install and boot time, hotfixes, hardware, and domain membership — no tools to drop, no arguments needed. It maps to MITRE T1082 — System Information Discovery.

Raw output is long; pipe it through findstr to keep the signal:

systeminfo | findstr /B /C:"OS Name" /C:"OS Version" /C:"System Type" /C:"Hotfix"

Domain-membership triage

systeminfo | findstr Domain

A quick, semi-reliable domain check: workgroup machines almost always report Domain: WORKGROUP, while AD-joined machines report the fully qualified DNS domain — useful context before deciding whether AD enumeration is even on the table. (whoami /upn, set logonserver, and nltest /dsgetdc: corroborate.)

The hotfix list doubles as a patch-level inventory for privesc targeting — missing KBs line up directly with kernel-exploit candidates (see windows-privesc-recon-scripts for the automated version of this reasoning).

Related

• findstr — the filter that makes systeminfo readable
• windows-reconnaissance-commands — the full built-in situational-awareness toolkit
• whoami — complementary identity/privilege snapshot

Sources

• Microsoft Learn — systeminfo
• MITRE ATT&CK T1082 — System Information Discovery