Obj 3 Enumeration

Task - Enumerate ACL for Domain admins and All modify rights/permissions for our user.

Enumeration Cont.

Find ACL's for Domain Admins Group

Get-DomainObjectAcl -Identity "Domain Admins" -ResolveGUIDs -Verbose

Find Interesting Domain ACL for our user

Find-InterestingDomainAcl -ResolveGUIDs | ?{$_.IdentityReferenceName -match "studentx"} 

Find Interesting Domain ACL for our group

Find-InterestingDomainAcl -ResolveGUIDs | ?{$_.IdentityReferenceName -match "RDPUsers"}