After gaining a foothold on a city domain-joined laptop, what should the tester prioritize first for Active Directory situational awareness?
Select an answer to reveal the explanation.
Short Explanation
Before you start swinging tools, look at the badge you are wearing. Who are you, which domain, which groups, how privileged? That quick situational check keeps the next moves purposeful instead of loud and random.
Full Explanation
Effective AD work begins with establishing identity and privilege context on the foothold: user, domain, group memberships, and related rights. That baseline informs whether noisy credential attacks or broad tooling are justified under RoE. Shotgun frameworks and forest-wide spraying without context increase detection risk and may violate engagement constraints. Local destructive actions like formatting disks are unrelated to AD situational recon.