Enumerating Active Directory

Walkthrough summary

Enumerating Active Directory TryHackMe walkthrough with 22 answered prompts and lab methodology notes.

Sample prompts covered

• What native Windows binary allows us to inject credentials legitimately into memory?
  Open the walkthrough page to inspect the full answer and command flow.
• What parameter option of the runas binary will ensure that the injected credentials are used for all network connections?
  Open the walkthrough page to inspect the full answer and command flow.
• What network folder on a domain controller is accessible by any authenticated AD account and stores GPO information?
  Open the walkthrough page to inspect the full answer and command flow.
• When performing dir \\za.tryhackme.com\SYSVOL, what type of authentication is performed by default?
  Open the walkthrough page to inspect the full answer and command flow.
• How many Computer objects are part of the Servers OU?
  Open the walkthrough page to inspect the full answer and command flow.