Windows network resources
NetBIOS enumeration (if port closed, none work)
SNMP enumeration: SolarWinds IP Network Browser (commercial, see book).
- Countermeasures: Windows close port 445.
Windows DNS Zone Transfers: Active Directory is based on DNS and create new vulnerability, but provides tool -- “Computer Management” Microsoft Management Console (MMC) -- to restrict zone transfers to certain IP numbers.