Enumeration Flashcards

AD enumeration (48 cards)

1
Q

PV: Return a given domain object

A

Get-NetDomain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AD: Return a given domain object

A

Get-ADDomain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

PV: Get the Domain SID

A

Get-DomainSID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AD: Get the Domain SID

A

Get-ADDomain

(Get-ADDomain).DomainSID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

PV: Get the Domain Policy

A

Get-DomainPolicy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

PV: List the Domain Controllers

A

Get-NetDomainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AD: List the Domain Controllers

A

Get-ADDomainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

PV: Get a list of users in the domain

A

Get-NetUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AD: Get a list of users in the domain

A

Get-ADUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

PV: Get a list of user properties

A

Get-UserProperty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

PV: Search user object fields for a given word

A

Find-UserField -SearchField -Search Term

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

PV: Get a list of computers in the domain

A

Get-NetComputer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AD: Get a list of computers in the domain

A

Get-ADComputer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

PV: Get a list of all groups in the current domain

A

Get-NetGroup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AD: Get a list of all groups in the current domain

A

Get-ADGroup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

PV: Get members of a domain group

A

Get-NetGroupMember

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

AD: Get members of a domain group

A

Get-ADGroupMember

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

PV: Get domain groups that the specified user is a member of

A

Get-NetGroup -UserName

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

AD: Get domain groups that the specified user is a member of

A

Get-ADPrincipalGroupMembership -Identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

PV: List the local groups on a machine

A

Get-NetLocalGroup -ListGroups

21
Q

PV: Get actively logged on users. Needs admin on target

A

Get-NetLoggedOn

22
Q

Get locally logged on users on a computer. Needs remote registry

A

Get-LoggedOnLocal

23
Q

PV: Get the last logged on user on a computer

A

Get-LastLoggedOn

24
Q

PV: Find shares on hosts

A

Invoke-ShareFinder

25
PV: Get all files servers in a domain
Get-NetFileServer
26
PV: Get a list of all current GPO in a domain
Get-NetGPO
27
Get the RSOP on the local machine
gpresult /R /V
28
PV: List all GPOs that set "restricted groups" or use groups.xml on target machines
Get-NetGPOGroup
29
PV: from a computer name or GPO list what users / groups are in the specified local group for the machine
Find-GPOComputerAdmin
30
PV: List machines where the given user is a member of a specific group
Find-GPOLocation
31
PV: Get a list of all OUs in a domain
Get-NetOU
32
AD: Get a list of all current OUs in a domain
Get-ADOrganizationalUnit
33
PV: List the ACLs associated with a specified object
Get-ObjectACL
34
PV: Search for interesting ACEs
Invoke-ACLScanner
35
PV: List domain trusts for the current domain
Get-DomainTrust
36
AD: List domain trusts for the current domain
Get-ADTrust
37
PV: Get details about the current forest
Get-NetForest
38
AD: Get details about the current forest
Get-AdForest
39
PV: List all of the domains in the current forest
Get-NetForestDomain
40
PV: List all global catalogs for the current forest
Get-NetForestCatalog
41
AD: List all global catalogs for the current forest
(Get-ADForest).GlobalCatalogs
42
PV: map trusts of a forest
Get-NetForestTrust
43
AD: map trusts of a forest
Get-ADTrust
44
PV: List all machines in the domain where the current user has local admin privs
Find-LocalAdminAccess
45
WMI: PV: List all machines in the domain where the current user has local admin privs
Find-WMILocalAdminAccess
46
PV: Find local admins on all machines in the domain
Invoke-EnumerateLocalAdmin
47
PV: Find computers where a domain admin has sessions
Invoke-UserHunter
48
PV: check whether we have local admin on localhost or specified hosts
Invoke-CheckLocalAdminAccess