Pillaging

🌐 Network

• Interfaces

• Subnets

• Routing

• DNS

• ARP

• Ports - connections

• VPN

• Shares

---

🖥 System Role

• Hostname

• Domain

• Roles

• GPOs

• Auth Type

• Sessions

---

🔐 Identity

• Users

• Groups

• Admins

• Services

• Tasks

• Tokens

• SSH Keys

• Stored Creds

---

🛡 Security

• Password Policy

• Lockout Policy

• LAPS

• AV/EDR

• Firewall

• MSI Policy

• Service Paths

• Binary Permissions

---

📂 Sensitive Data

• Scripts

• Configs

• Backups

• Documents

• DB Strings

• Mail Archives

• Vaults

• Registry Creds

• SAM/SYSTEM

• Share Data

---

🔄 Lateral Movement

• Cached Creds

• Kerberos

• RDP History

• Mounted Drives

• Admin Logons

• Remote Tools