Post-Compromise Enumeration

Playbook

• Dump domain information using ldapdomaindump

• For a better view use Bloodhound and or Plumbhound

• Identify high value targets

  • Domain Administrators

  • Enterprise Administrators

  • Administrators

  • Service Accounts

• ENUMERATE