Disclaimer: This material is provided for educational purposes and authorized security testing only. You are solely responsible for how you use the information. Do not use these techniques on systems without explicit permission from the owner. We do not encourage any kind of illegal or harmful activity

Enumerating AD Users

1. Enumerate AD users
   

   SharpView.exe Get-DomainUser -Identity gordon.stevens -Domain [DOMAIN]
   

2. Use filters to narrow user search
   

   SharpView.exe Get-DomainUser -Filter "samaccountname -like '*[USERNAME]*'" -Domain [DOMAIN]
   

3. List all AD users
   

   SharpView.exe Get-DomainUser -Domain [DOMAIN]
   

Enumerating AD Groups

1. Enumerate AD groups
   

   SharpView.exe Get-DomainGroup -Identity Administrators -Domain [DOMAIN]
   

2. Enumerate group membership
   

   SharpView.exe Get-DomainGroupMember -Identity Administrators -Domain [DOMAIN]
   

3. List all AD groups
   

   SharpView.exe Get-DomainGroup -Domain [DOMAIN]
   

Enumerating AD Computers

1. Enumerate AD computers
   

   SharpView.exe Get-DomainComputer -Identity "DC01" -Domain [DOMAIN]
   

2. Use filters to narrow computer search
   

   SharpView.exe Get-DomainComputer -Filter "operatingsystem -like '*Server*'" -Domain [DOMAIN]
   

3. List all AD computers
   

   SharpView.exe Get-DomainComputer -Domain [DOMAIN]
   

Enumerating AD Objects

1. Perform generic AD object searches
   

   SharpView.exe Get-DomainObject -Filter "whenchanged -gt 2024-02-28T12:00:00" -Domain [DOMAIN]
   

2. List all AD objects
   

   SharpView.exe Get-DomainObject -Domain [DOMAIN]
   

Enumerating Domains

1. Retrieve detailed domain information
   

   SharpView.exe Get-Domain -Domain [DOMAIN]
   

2. Enumerate organizational units (OUs)
   

   SharpView.exe Get-DomainOU -Domain [DOMAIN]
   

Enumerating Group Policy Objects (GPOs)

1. Retrieve Group Policy Objects in the domain
   

   SharpView.exe Get-DomainGPO -Domain [DOMAIN]
   

Enumerating Trusts

1. Retrieve domain trust information
   

   SharpView.exe Get-DomainTrust -Domain [DOMAIN]
   

Enumerating Domain Controllers

1. Retrieve domain controller information
   

   SharpView.exe Get-DomainController -Domain [DOMAIN]