In this part we will enumerate the domain using AD-Module.

Loading the Module

Import-Module ..\\Microsoft.ActiveDirectory.Management.dll
Import-Module .\\ActiveDirectory.psd1

Getting information about the domain

Get-ADDomain

Getting domain SID

(Get-ADDomain).DomainSID

Getting information about other domain (If there is trust)

Get-ADDomain -Identity moneycorp.local

Getting information about the domain controller

Get-ADDomainController

Getting information about other domain controller (if we have trust)

Get-ADDomainController -DomainName moneycorp.local -Discover