Tools LINK AD explorer - PSexec - memcatz - ProcDump - ProxExp - PSLoggedOn - Strings - AutoRuns - AccessChk - AccessEnum - ADRestore - EFSDump - Frameworks Metasploit - Empire - Veil - Missing patches Searching for Cleartext Passwords Cracking passwords Searching for weak file permissions Pivoting Memory injection