Update Post-Exploitation.md

huaijinli · Mar 17, 2022 · 7ff7086 · 7ff7086
1 parent 5a77d4a
commit 7ff7086
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/windows-ad/Post-Exploitation.md b/windows-ad/Post-Exploitation.md
@@ -1,6 +1,7 @@
 # Post-Exploitation
 
 * [General](#General)
+* [Information gathering](#Information-gathering)
 * [Find credentials in files](#Find-credentials-in-files)
 * [Dumping LSASS](#Dumping-LSASS)
 * [Dumping SAM](#Dumping-SAM)
@@ -10,13 +11,25 @@
 * [DPAPI](#DPAPI)
 
 ## General
+
+## Information gathering
 #### Seatbelt - Gather generic info of the host
 - https://github.com/GhostPack/Seatbelt
 ```
 Seatbelt.exe -group=user
 Seatbelt.exe -group=all
 ```
 
+#### Get loggged on sessions
+```
+net logons
+```
+
+#### Get list of running processes
+```
+ps
+```
+
 ## Find credentials in files
 #### Look for SAM files
 ```