Enumeration Flashcards

AD enumeration

1
Q

PV: Return a given domain object

A

Get-NetDomain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

AD: Return a given domain object

A

Get-ADDomain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

PV: Get the Domain SID

A

Get-DomainSID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

AD: Get the Domain SID

A

Get-ADDomain

(Get-ADDomain).DomainSID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

PV: Get the Domain Policy

A

Get-DomainPolicy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

PV: List the Domain Controllers

A

Get-NetDomainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

AD: List the Domain Controllers

A

Get-ADDomainController

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

PV: Get a list of users in the domain

A

Get-NetUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AD: Get a list of users in the domain

A

Get-ADUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

PV: Get a list of user properties

A

Get-UserProperty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

PV: Search user object fields for a given word

A

Find-UserField -SearchField -Search Term

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

PV: Get a list of computers in the domain

A

Get-NetComputer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

AD: Get a list of computers in the domain

A

Get-ADComputer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

PV: Get a list of all groups in the current domain

A

Get-NetGroup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AD: Get a list of all groups in the current domain

A

Get-ADGroup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

PV: Get members of a domain group

A

Get-NetGroupMember

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

AD: Get members of a domain group

A

Get-ADGroupMember

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

PV: Get domain groups that the specified user is a member of

A

Get-NetGroup -UserName

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

AD: Get domain groups that the specified user is a member of

A

Get-ADPrincipalGroupMembership -Identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

PV: List the local groups on a machine

A

Get-NetLocalGroup -ListGroups

21
Q

PV: Get actively logged on users. Needs admin on target

A

Get-NetLoggedOn

22
Q

Get locally logged on users on a computer. Needs remote registry

A

Get-LoggedOnLocal

23
Q

PV: Get the last logged on user on a computer

A

Get-LastLoggedOn

24
Q

PV: Find shares on hosts

A

Invoke-ShareFinder

25
Q

PV: Get all files servers in a domain

A

Get-NetFileServer

26
Q

PV: Get a list of all current GPO in a domain

A

Get-NetGPO

27
Q

Get the RSOP on the local machine

A

gpresult /R /V

28
Q

PV: List all GPOs that set “restricted groups” or use groups.xml on target machines

A

Get-NetGPOGroup

29
Q

PV: from a computer name or GPO list what users / groups are in the specified local group for the machine

A

Find-GPOComputerAdmin

30
Q

PV: List machines where the given user is a member of a specific group

A

Find-GPOLocation

31
Q

PV: Get a list of all OUs in a domain

32
Q

AD: Get a list of all current OUs in a domain

A

Get-ADOrganizationalUnit

33
Q

PV: List the ACLs associated with a specified object

A

Get-ObjectACL

34
Q

PV: Search for interesting ACEs

A

Invoke-ACLScanner

35
Q

PV: List domain trusts for the current domain

A

Get-DomainTrust

36
Q

AD: List domain trusts for the current domain

A

Get-ADTrust

37
Q

PV: Get details about the current forest

A

Get-NetForest

38
Q

AD: Get details about the current forest

A

Get-AdForest

39
Q

PV: List all of the domains in the current forest

A

Get-NetForestDomain

40
Q

PV: List all global catalogs for the current forest

A

Get-NetForestCatalog

41
Q

AD: List all global catalogs for the current forest

A

(Get-ADForest).GlobalCatalogs

42
Q

PV: map trusts of a forest

A

Get-NetForestTrust

43
Q

AD: map trusts of a forest

A

Get-ADTrust

44
Q

PV: List all machines in the domain where the current user has local admin privs

A

Find-LocalAdminAccess

45
Q

WMI: PV: List all machines in the domain where the current user has local admin privs

A

Find-WMILocalAdminAccess

46
Q

PV: Find local admins on all machines in the domain

A

Invoke-EnumerateLocalAdmin

47
Q

PV: Find computers where a domain admin has sessions

A

Invoke-UserHunter

48
Q

PV: check whether we have local admin on localhost or specified hosts

A

Invoke-CheckLocalAdminAccess