In this part we will enumerate the domain using PowerView.

Loading the Module

. .\\PowerView.ps1

Getting information about the current domain

Get-Domain
Get-NetDomain

Getting domain SID

Get-DomainSID

Getting information about other domain (If there is trust)

Get-Domain -Domain moneycorp.local

Getting information about domain policy

Get-DomainPolicy
Get-NetPolicy

Getting information about Kerberos Policy

(Get-DomainPolicy).KerberosPolicy