Which PowerShell module focuses on account information, domain information, and shares?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

Which PowerShell module focuses on account information, domain information, and shares?

Explanation:
PowerView is the PowerShell module designed for enumerating Active Directory and domain resources. It focuses on discovering account information (users, groups, computers), domain details (domain structure, trusts, domain controllers), and shares (network shares and their permissions). This combination directly matches the task of gathering who exists in the domain, what the domain looks like, and what shares are available, which is why it’s the best fit. The broader PowerSploit suite is the collection that includes PowerView, but PowerUp handles privilege escalation, and PowerBreach isn’t the primary module for this type of discovery, making PowerView the right choice for this question.

PowerView is the PowerShell module designed for enumerating Active Directory and domain resources. It focuses on discovering account information (users, groups, computers), domain details (domain structure, trusts, domain controllers), and shares (network shares and their permissions). This combination directly matches the task of gathering who exists in the domain, what the domain looks like, and what shares are available, which is why it’s the best fit. The broader PowerSploit suite is the collection that includes PowerView, but PowerUp handles privilege escalation, and PowerBreach isn’t the primary module for this type of discovery, making PowerView the right choice for this question.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy