# dsexport

> Export data from an Open Directory directory services server.

dsexport is a command-line utility designed to export records from the directory services database on a local host or from a connected LDAP service. The tool can be used to gather information about users, groups, and computers. The tool can also be used to export the directory services database to a file for offline analysis.

- Page: https://loobins.io/binaries/dsexport/
- Author: Brendan Chamberlain (@infosecB)
- Created: 2023-05-23
- Tactics: Reconnaissance, Discovery

## Paths

- `/usr/bin/dsexport`

## Example Use Cases

### Export local host users

Export the local host user information to a file

```bash
dsexport local_users.txt /Local/Default dsRecTypeStandard:Users
```

- Tactics: Reconnaissance, Discovery
- Tags: ldap, users

### Export local host groups

Export the local host group information to a file

```bash
dsexport local_groups.txt /Local/Default dsRecTypeStandard:Groups
```

- Tactics: Reconnaissance, Discovery
- Tags: ldap, groups

## Detections

- No detections at time of publishing