I wanted to point something out to real quick because you may be wondering if you would like me in early on days of learning this.
Well, do I have to be an administrator for all of this information? And the answer is no.
And that's because there's a lot of information that's allowed to the regular users that is by default available to us.
And the security system, the security administrators should be going through and blocking a lot of this or restricting access to those that absolutely need it.
And the reason I want to point this out is because in this window right here, you can see that I have administrator command prompt open.
The one behind it is just a regular user.
And I ran the user account list full command on both of these as elevated and as a regular user.
So if I go back into regular user, you can see here that I have for prefix account information as far as the public details available for it on who's on the system.
So his SID and everything else like that. And it's available to me as a regular user.
Now, who am I logged in as? Well, that's easy. I can just hit enter again and say, who am I?
And I'm logged in as actual learner right now.
Now, yes, learner is an administrator, but the command prompt is open without elevated permissions.
This is just something to keep in mind that there are commands out there that you could use to be able to gather information.
Reconnaissance, pen testing, lifecycle, to be able to go through and prep the playing field for your exercise against an organization.