RedTeam
5.Machine
3.Active-Directory
General
Exploitation
General
2.initial Users Enumeration

Initial User Enumeration (Local and Domain)

Searching for user/admin account - Users Accounts - Type of Admin Accounts ![[Pasted image 20230131212144.png]]

# From Local Machine
Get-WmiObject -Class Win32_UserAccount | Select-Object -Property Name, Domain, Status

# From Active Directory
Get-ADuser -Filter *
Get-ADuser -Filter * -Properties *
Get-ADUser -Filter * | Select-Object -Property Name, Domain, Status
2.1.initial Domain EnumerationShema of Exploitation