6.2 Find domain identities, relationships and access opportunities Enumeration

AD cheatsheet | §6 — Chapter 6

Select the numbered section matching the current investigation. Baselines, alternatives, interpretations and conditional receiving sections are kept underneath it.

• §6.2.1 — Baseline enumeration — users and groups
• §6.2.2 — Enumerate shares, SYSVOL and NETLOGON
• §6.2.3 — Interpret scripts, configuration and exposed secrets
• §6.2.4 — Enumerate service accounts and SPNs
• §6.2.5 — Enumerate and validate effective object permissions
• §6.2.6 — Validate host-specific access rights
• §6.2.7 — Enumerate and interpret sessions
• §6.2.8 — Enumerate using BloodHound and validate relationships
• §6.2.9 — Complete AD mapping methods