Good evening, operator.

Your authorized assessment at a glance.

UFootholdDomain useranalyst.svc✓

◎EnumerationMap directoryBloodHound · 4 results✓

◇ConditionSPN discoveredsvc_backup · MSSQLSvc•

KCredential accessValidate ticket2 commands · Moderate○

↗Lateral movementFile server accesssrv-files-02○

Successful Tested Not tested Failed

SELECTED TECHNIQUE

Enumerate users and key attributes

Inventory enabled identities, delegation flags, SPNs and account state.

EnumerationRead-onlyAD Module

READY COMMAND

ad module

Get-ADUser -Filter * -Server dc01.northstar.local -Properties Enabled,ServicePrincipalName,DoesNotRequirePreAuth,AdminCount

PREREQUISITES

Authenticated domain account
Approved target scope

EXPECTED RESULT

Validated directory evidence
Reusable relationship data

⌁

Detection & OPSEC

Prefer scoped collection. Review LDAP and authentication telemetry; avoid broad collection outside the approved window.

COMPATIBLE NEXT STEPS3 options