Targeted Active Directory Host Enumeration
ID: b29e234d-c2d5-5470-8348-73404f97d8d0
STIX ID: report--b29e234d-c2d5-5470-8348-73404f97d8d0
Feed Name: TrustedSec blog
This report explains a practical method for enumerating active Windows hosts in Active Directory by leveraging machine account password change timestamps (pwdLastSet), related NetLogon registry/GPO settings, and ADSI/LDAP filters with PowerShell examples; it covers considerations for virtualized and non-Windows domain members and lists key AD attributes to collect for situational awareness.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.