AD User & Group Enumeration via net.exe, dsquery, dsget
Detects common reconnaissance activities using built-in Windows utilities to enumerate domain users, domain groups, and local administrators, as well as LDAP enumeration using dsquery and dsget.
SentinelOne

