EHWS TOOLKIT  ·  AD / Enumeration
← All Tools
// Built-in AD Privileged Groups
What You Can Do With Each Group
Every built-in AD privileged group — the exact rights it confers, the specific abuse path, operator commands, defender detection, and remediation. Most groups are dramatically under-audited. Click any card to expand.
// Paste & Analyze
Group Membership Analyzer
Paste output from net group /domain, Get-ADGroupMember, or BloodHound group membership export. The analyzer identifies every dangerous group membership, scores risk, and gives you the exact abuse path for each finding.
// Paste Group Membership Output
Paste group membership data to analyze
// Enumeration Commands
Group Membership Enum
Every command you need to enumerate privileged group membership — native, PowerShell, PowerView, NetExec, and BloodHound queries.