Domain Enumeration

Once we obtain a foothold in an AD network, we will be moving to the domain enumeration phase. Our objective is to collect the following information within the AD network:

• Users

• Groups

• Computers

• Shares

• GPO

• ACL

• Trust

The most popular tools for domain enumeration are:

• net user /domain

• PowerView

• BloodHound