Skip to main content

15. What is the approach for domain information gathering?

  1. Determine if a domain exists
  2. Locate the domain controller
  3. Query basic domain information (domains, trust, password policy)
  4. Enumerate domain users (identify domain admins)
  5. Enumerate domain hosts
  6. Use BloodHound