LDAP Object Enumeration via bloodyAD

Use bloodyAD to read attributes from a selected Active Directory object with password, NT-hash, or Kerberos authentication. For object reads, choose one authentication path; the paths are alternatives, not a sequence. The rootDSE query is a separate optional check for domain-controller functionality. The examples query sAMAccountName and userAccountControl on a supplied target, or request domain-controller functionality from rootDSE. They do not list all domain accounts or retrieve schema contents.