Passive Active Directory security enumeration via native ADSI/COM… — ＳｅｃＮｏｔｅ — TG.ME

ＳｅｃＮｏｔｅ@SecNote · 2.3K subscribers Open in TelegramOpen

Passive Active Directory security enumeration via native ADSI/COM interfaces. No .NET. No PowerShell. No managed runtime.

#ad

t.me/SecNote/330 Translate

6

2

1

July 13, 2026 1.8K 36

More from this channel

Woooowwwww You must Read this https://mrtiz.github.io/cet-callstack-spoofing-thread-pool-trampoline #callstack #bypass 653Aug 22 Sam dumping using VSS COM Api #sam #cred 1.1KAug 18 Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel”, presented at DEF CON 34 and BSidesLV 2026. #EDR #maldev #defcon 1.2KAug 17 ＳｅｃＮｏｔｅ pinned a videoAug 15

You don’t always need to go for the hardest approach. Sometimes, you just need to understand what you actually need and choose the right path. As you know, LSASS is heavily monitored and protected nowadays, so getting a dump from it isn’t as straightforward as it used to be. So instead of getting stuck on LSASS and trying to bypass every protection around it, why not look at other options? If the goal is to obtain local account credential material, SAM might be enough for what we need. The point is simple: choose the technique based on the objective, not based on how complicated it is. #EDR #SentinelOne 2.4KAug 15