> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/active-directory/enumeration/adrecon.ps1.md).

# ADRecon.ps1

**#Clone repo**

```
sudo git clone https://github.com/sense-of-security/ADRecon.git
```

**#Usage**

```
#Run on a domain member host.

PS C:\> .\ADRecon.ps1

#Run on a domain member host as a different user.

PS C:\>.\ADRecon.ps1 -DomainController <IP or FQDN> -Credential <domain\username>

#Run on a non-member host using LDAP.

PS C:\>.\ADRecon.ps1 -Protocol LDAP -DomainController <IP or FQDN> -Credential <domain\username>

```