Valid Domain Account SMB Service Execution

Valid domain accounts managed by Active Directory Domain Services may be obtained through credential theft or password reuse and used to access domain resources. This workflow enumerates candidate accounts, then uses a separately obtained NTLM credential to authenticate to a remote SMB host and, when the account has the required administrative rights, execute a command through a service-based method. Enumeration does not produce a password or hash; successful SMB authentication does not prove remote command execution. The current steps document generic domain-account abuse and SMB service execution, not a specific one-way-trust abuse procedure.