Security Reconnaissance
Map privilege and identify risk
Advanced~15 mincontoso.com
Security Reconnaissance
PS C:\>
Domain
Group
User
Service
OU
Step 1 of 9
Security Recon Briefing
In this lab you'll perform a security reconnaissance of the contoso.com domain — the kind of assessment a security analyst does when evaluating an AD environment.
Your objectives:
- •Identify all privileged groups and their members
- •Find service accounts that could be targeted
- •Assess the overall attack surface
Click "Continue" to begin the assessment.
Objectives
- Survey the User Population
- Enumerate Security Groups
- Inspect Domain Admins
- Who Are the Domain Admins?
- Enterprise Admins
- Find Service Accounts
- Service Account Audit