Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1087.002_domain-account
Adversaries may attempt to get a listing of domain accounts.
Passed 22 of 24 test cases with the skill, and 14 of 24 without it.
and 9 more in the full report
8 fixed14 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
In a threat report covering domain account enumeration vulnerabilities, an editor marked the finding severity as Medium and impact as Initial Access. What are the severity and impact classifications assigned to this technique finding?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies severity as High. | Missed | Passed |
| Specifies impact as Discovery. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1087
Adversaries may attempt to get a listing of domain accounts. This information can help adversaries determine which domain accounts exist to aid in follow-on behavior such as targeting specific accounts which possess particular privileges.
Commands such as net user /domain and net group /domain of the Net utility, dscacheutil -q group on macOS, and ldapsearch on Linux can list domain users and groups. PowerShell cmdlets including Get-ADUser and Get-ADGroupMember may enumerate members of Active Directory groups.
Platforms: Linux, macOS, Windows
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Enumerate all accounts Upon exection, multiple enumeration commands will be run and their output displayed in the PowerShell session
Supported Platforms: windows
net user /domain
test cases passed, vs 14 / 24 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.