Manual Enumeration

Situational Awareness

Network Information

# IP Settings
ipconfig /all

# ARP Table
arp -a

# Routing Table
route print

Windows Defender Status

Get-MpComputerStatus | select AntivirusEnabled,

AppLocker Enabled

Get-AppLockerPolicy -Effective | select -ExpandProperty RuleCollections

Initial Enumeration

System Information Commands

# Running Processes
tasklist /svc

# Displaying Environment Variables
set

# Detailed System Information
systeminfo

# Display Hotfixes
Get-HotFix | ft -AutoSize

# Installed Programs
Get-WmiObject -Class Win32_Product |  select Name, Version

# List Logged in Users
query user

# Current User Privileges
whoami /priv

# Get All Users
net user

# Detailed Group Information
net localgroup administrators

# Get Password Policy
net accounts

# Network Services
netstat -ano

# List Named Pipes
gci \\.\pipe\

# Review Named Pipes
accesschk.exe /accepteula \\.\Pipe\lsass -v