📂 02 - ATT&CK Discovery
Overview
MITRE ATT&CK: Discovery (TA0007) — the adversary is trying to figure out your environment.
Internal, post-access enumeration: once on a host or inside a domain, learning about users, groups, privileges, processes, services, network layout and AD relationships (e.g. BloodHound, WinPEAS, container/pod enumeration).
🧠 Techniques
| File | Created |
|---|---|
| Active Directory - Enumeration | July 22, 2026 |
| Active Directory - RID Cycling | July 21, 2026 |
| Linux - Docker Container Enumeration | May 21, 2026 |
| Linux - General Enumeration | Wednesday, March 11th 2026, 9:00:54 am |
| Linux - Kubernetes Pod Enumeration | May 21, 2026 |
| Windows Enumeration - General | July 22, 2026 |
📦 Tech Stack
| File | Created |
|---|---|
| Active Directory | July 23, 2026 |
| Kubernetes | July 27, 2026 |
🛠️ Tools
| File | Created |
|---|---|
| (incomplete) Kubectl | May 21, 2026 |
| BloodHound | Tuesday, July 21st 2026, 12:58:56 am |
| BloodyAD | September 06, 2026 |
| Docker CLI | May 21, 2026 |
| Impacket | July 20, 2026 |
| kubeletctl | July 27, 2026 |
| NetExec | July 20, 2026 |
| Volatility 3 | September 06, 2026 |
| WinPEAS | July 21, 2026 |
🚩 Related CTF Operations
| File | difficulty |
|---|---|
| HTB Machine - Administrator | Medium |
| HTB Machine - Authority | Medium |
| HTB Machine - Certified | Medium |
| HTB Machine - Checkpoint | Medium |
| HTB Machine - Cicada | Easy |
| HTB Machine - Cohort | Easy |
| HTB Machine - Driver | Easy |
| HTB Machine - Enigma | Easy |
| HTB Machine - EscapeTwo | Easy |
| HTB Machine - GiveBack | Medium |
| HTB Machine - Paperwork | Easy |
| HTB Machine - Reactor | Medium |
| HTB Machine - Return | Easy |
| HTB Machine - Sauna | Easy |
| HTB Machine - Scrambled | Medium |
| HTB Machine - SteamCloud | Easy |
| HTB Machine - StreamIO | Medium |
| HTB Machine - Support | Easy |
| HTB Machine - Timelapse | Easy |