SysInternals

Sysinternal Tools

• ADExplorer

  • TrustedSec Writeup

• AccessChk

• Autoruns

• AccessEnum

• PsExec

• PsFile

• ShareEnum

Tools to use without Creds

• AD-Explorer

• Autoruns

• AccessChk

• AccessEnum

• ShareEnum

• PsFile

Tolls to use With Creds

• Sharphound

• Powerview

• Active Directory Certificate Services (AD CS)

• Kerboasting or AESPRoating

• DACL Attack