Domain account discovery lists account names in an Active Directory domain, commonly through LDAP queries or native directory commands. This Discovery behavior can inform later targeting; enumeration alone does not authenticate as listed accounts, obtain their credentials, or establish their privileges. The included Impacket example queries user objects and is not a complete inventory of groups or computer accounts.
Variant:
Enumerate Domain Users
powershell
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER