# Manual Enumeration

## Situational Awareness

### Network Information

```powershell
# IP Settings
ipconfig /all

# ARP Table
arp -a

# Routing Table
route print
```

### Windows Defender Status

```powershell
Get-MpComputerStatus | select AntivirusEnabled,
```

### AppLocker Enabled

```powershell
Get-AppLockerPolicy -Effective | select -ExpandProperty RuleCollections
```

## Initial Enumeration

### System Information Commands

```powershell
# Running Processes
tasklist /svc

# Displaying Environment Variables
set

# Detailed System Information
systeminfo

# Display Hotfixes
Get-HotFix | ft -AutoSize

# Installed Programs
Get-WmiObject -Class Win32_Product |  select Name, Version

# List Logged in Users
query user

# Current User Privileges
whoami /priv

# Get All Users
net user

# Detailed Group Information
net localgroup administrators

# Get Password Policy
net accounts

# Network Services
netstat -ano

# List Named Pipes
gci \\.\pipe\

# Review Named Pipes
accesschk.exe /accepteula \\.\Pipe\lsass -v
```