Enumeration and Discovery

• Windows Event IDs and Others for Situational Awareness

• Enumerating COM Objects and their Methods

• Enumerating Users without net, Services without sc and Scheduled Tasks without schtasks

• Enumerating Windows Domains with rpcclient through SocksProxy == Bypassing Command Line Logging

• Dump Global Address List (GAL) from OWA

• Application Window Discovery

• Account Discovery & Enumeration

• Using COM to Enumerate Hostname, Username, Domain, Network Drives

• Detecting Sysmon on the Victim Host