in reply to How can I get which Windows domain an IP belongs to?

I tried a variant of both the run nbtstat.exe and use Net::NBName methods but I used the regex /(\S+)\s*?<00>\s*?GROUP/i to capture the domain as $1. Appeared to do the trick.

This page looked like a useful reference for the various entries in the table.