MmcExec

Executes a lateral movement technique using MMC over DCOM

• RPC
• NTLM
• DCOM
• OLE Automation
• Dynamic IDispatch

ShellDcomExec

Executes a lateral movement technique using the shell over DCOM.

• RPC
• NTLM
• DCOM
• OLE Automation
• Dynamic IDispatch

WordMacroExec

Adds a macro to a Word document over DCOM.

• RPC
• NTLM
• DCOM
• OLE Automation
• Dynamic IDispatch

EnumUsers

Enumerates user accounts.

• NTLM
• RPC
• Using SAM service to enumerate users

WeakService

Enumerates services, checking whether the DACL contains interesting entries.

• NTLM
• RPC
• SMB
• Using LSA to translate SIDs to account names
• Enumerating services
• Analyzing security descriptors

Smb2GetSample

Gets a file over SMB2.

• SMB

WmiExec

Executes a process using Win32_Process.Create

• RPC
• DCOM
• WMI
• Dynamic dispatch

WmiRegistry

Uses WMI to access the registry.

• RPC
• DCOM
• WMI
• Dynamic dispatch