From a host with approved internal-network access, collect three distinct views of the environment: responsive hosts and open TCP ports, SMB share availability/access, and user/group information exposed through SMB/RPC enumeration. The Nmap fast command scans only the top 100 common TCP ports and does not identify service versions. SMB and account/group queries are separate collection actions whose results depend on target reachability and policy.
Check before starting: RESTRICTED_ACCESS_BLUR_MARKER
Variant:
Full outcome coverage
Cobalt Strike · Scan hosts and ports with Beacon portscan
Scan hosts and ports with Beacon portscan
powershell
RESTRICTED_ACCESS_BLUR_MARKER
Version: RESTRICTED_ACCESS_BLUR_MARKER. Requirements: ALL(RESTRICTED_ACCESS_BLUR_MARKER)Documents all requested outcomes. This is a candidate, not proof of execution or compatibility.