first steps after gaining initial access with cobalt strike

[notactive]

So, when you gain initial access with cobalt strike, what are the first global steps to take? is there a guideline / note's.

 

[victor11222]

initially determine the target and attacked it, after you want to know other people ways to not work on it.?

 

[detroit_clock]

First step I always is to find my position in the domain,
Like
1. User details like groups
2. domain names & domain trusts
3. user privileges
and 4. work station privileges checking am i local administrator or not, depending on that i will persist my access.
and next steps finding network shares, running adfind getting all the way domain admin and accessing DC.

 

[notactive]

First step I always is to find my position in the domain,
Like
1. User details like groups
2. domain names & domain trusts
3. user privileges
and 4. work station privileges checking am i local administrator or not, depending on that i will persist my access.
and next steps finding network shares, running adfind getting all the way domain admin and accessing DC.

intressting, thanks. if you have any notes for it. please let me know. thanks