> For the complete documentation index, see [llms.txt](https://pwc-3.gitbook.io/pwc/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pwc-3.gitbook.io/pwc/ji-shu/untitled-1/offensive-security/enumeration-and-discovery.md).

# Enumeration and Discovery

[What is ired.team?](broken://pages/-MXRFngAdggiakXRT900)

Pinned

[Pentesting Cheatsheets](/pwc/ji-shu/untitled-1/offensive-security-experiments/pentesting-cheatsheets.md)

[Active Directory & Kerberos Abuse](/pwc/ji-shu/untitled-1/offensive-security-experiments/active-directory-and-kerberos-abuse.md)

offensive security

[Red Team Infrastructure](/pwc/ji-shu/untitled-1/offensive-security/red-team-infrastructure.md)

[Initial Access](/pwc/ji-shu/untitled-1/offensive-security/initial-access.md)

[Code Execution](/pwc/ji-shu/untitled-1/offensive-security/code-execution.md)

[Code & Process Injection](/pwc/ji-shu/untitled-1/offensive-security/code-and-process-injection.md)

[Defense Evasion](/pwc/ji-shu/untitled-1/offensive-security/defense-evasion.md)

[Enumeration and Discovery](/pwc/ji-shu/untitled-1/offensive-security/enumeration-and-discovery.md)

[Windows Event IDs and Others for Situational Awareness](https://www.ired.team/offensive-security/enumeration-and-discovery/windows-event-ids-for-situational-awareness)

[Enumerating COM Objects and their Methods](https://www.ired.team/offensive-security/enumeration-and-discovery/enumerating-com-objects-and-their-methods)

[Enumerating Users without net, Services without sc and Scheduled Tasks without schtasks](https://www.ired.team/offensive-security/enumeration-and-discovery/enumerating-users-without-net-services-without-sc-and-scheduled-tasks-without-schtasks)

[Enumerating Windows Domains with rpcclient through SocksProxy == Bypassing Command Line Logging](https://www.ired.team/offensive-security/enumeration-and-discovery/enumerating-windows-domains-using-rpcclient-through-socksproxy-bypassing-command-line-logging)

[Dump GAL from OWA](https://www.ired.team/offensive-security/enumeration-and-discovery/dumping-gal-global-address-list-from-outlook-web-application)

[Application Window Discovery](https://www.ired.team/offensive-security/enumeration-and-discovery/t1010-application-window-discovery)

[Account Discovery & Enumeration](https://www.ired.team/offensive-security/enumeration-and-discovery/t1087-account-discovery)

[Using COM to Enumerate Hostname, Username, Domain, Network Drives](https://www.ired.team/offensive-security/enumeration-and-discovery/using-com-to-enumerate-hostname-username-domain-network-drives)

[Detecting Sysmon on the Victim Host](https://www.ired.team/offensive-security/enumeration-and-discovery/detecting-sysmon-on-the-victim-host)

[Privilege Escalation](/pwc/ji-shu/untitled-1/offensive-security/privilege-escalation.md)

[Credential Access & Dumping](/pwc/ji-shu/untitled-1/offensive-security/credential-access-and-dumping.md)

[Lateral Movement](/pwc/ji-shu/untitled-1/offensive-security/lateral-movement.md)

[Persistence](/pwc/ji-shu/untitled-1/offensive-security/persistence.md)

[Exfiltration](/pwc/ji-shu/untitled-1/offensive-security/exfiltration.md)

reversing, forensics & misc

[Windows / OS Internals](/pwc/ji-shu/untitled-1/miscellaneous-reversing-forensics/windows-os-internals.md)

[Cloud](/pwc/ji-shu/untitled-1/miscellaneous-reversing-forensics/cloud.md)

[Neo4j](/pwc/ji-shu/untitled-1/miscellaneous-reversing-forensics/neo4j.md)

[Dump Virtual Box Memory](/pwc/ji-shu/untitled-1/miscellaneous-reversing-forensics/dump-virtual-box-memory.md)

[AES Encryption Using Crypto++ .lib in Visual Studio C++](/pwc/ji-shu/untitled-1/miscellaneous-reversing-forensics/aes-encryption-using-crypto++-.lib-in-visual-studio-c++.md)

[Reversing Password Checking Routine](/pwc/ji-shu/untitled-1/miscellaneous-reversing-forensics/reversing-password-checking-routine.md)[Powered by **GitBook**](https://www.gitbook.com/?utm_source=content\&utm_medium=trademark\&utm_campaign=mantvydas)

## Enumeration and Discovery

Here are the articles in this section:[Windows Event IDs and Others for Situational Awareness](https://www.ired.team/offensive-security/enumeration-and-discovery/windows-event-ids-for-situational-awareness)[Enumerating COM Objects and their Methods](https://www.ired.team/offensive-security/enumeration-and-discovery/enumerating-com-objects-and-their-methods)[Enumerating Users without net, Services without sc and Scheduled Tasks without schtasks](https://www.ired.team/offensive-security/enumeration-and-discovery/enumerating-users-without-net-services-without-sc-and-scheduled-tasks-without-schtasks)[Enumerating Windows Domains with rpcclient through SocksProxy == Bypassing Command Line Logging](https://www.ired.team/offensive-security/enumeration-and-discovery/enumerating-windows-domains-using-rpcclient-through-socksproxy-bypassing-command-line-logging)[Dump GAL from OWA](https://www.ired.team/offensive-security/enumeration-and-discovery/dumping-gal-global-address-list-from-outlook-web-application)[Application Window DiscoveryDiscovery](https://www.ired.team/offensive-security/enumeration-and-discovery/t1010-application-window-discovery)[Account Discovery & EnumerationDiscovery](https://www.ired.team/offensive-security/enumeration-and-discovery/t1087-account-discovery)[Using COM to Enumerate Hostname, Username, Domain, Network Drives](https://www.ired.team/offensive-security/enumeration-and-discovery/using-com-to-enumerate-hostname-username-domain-network-drives)[Detecting Sysmon on the Victim HostExploring ways to detect Sysmon presence on the victim system](https://www.ired.team/offensive-security/enumeration-and-discovery/detecting-sysmon-on-the-victim-host)[PreviousExecuting C# Assemblies from Jscript and wscript with DotNetToJscript](https://www.ired.team/offensive-security/defense-evasion/executing-csharp-assemblies-from-jscript-and-wscript-with-dotnettojscript)[NextWindows Event IDs and Others for Situational Awareness](https://www.ired.team/offensive-security/enumeration-and-discovery/windows-event-ids-for-situational-awareness)

Last updated 2 years ago