Domain Info
#Domain / DC / Scope
#Domain:
DC-IP:
DC-Hostname:
Initial creds:
Time synced:
Hosts
#IP | Hostname | Role | Access | Notes
Working Credentials
#user | pass/hash/ticket | source | where it works
Spray Results
#password | users tried | hits | notes
Local Admin / High-Value Access
#host | user | local admin? | winrm | rdp | mssql | notes
Logged-on Users / Sessions
#host | privileged user seen | source (quser/qwinsta/etc) | notes
Shares / Loot
#host | share | access | useful files / creds
Kerberos Findings
#AS-REP:
Kerberoast:
Tickets:
LDAP / BloodyAD Findings
#interesting groups:
interesting users:
writable objects:
delegation:
gpo / acl path:
Attack Chain
#current foothold:
next smallest abuse step:
blocked by: