SID/RID Bruteforce - impacket-lookupsid
Anonymous brute via RPC
impacket-lookupsid anonymous@10.10.212.32 | tee usernames
impacket-lookupsid "":""@10.10.200.245 | tee usernames
As guest
impacket-lookupsid 'guest'@10.10.129.91
impacket-lookupsid anonymous@10.10.212.32 | tee usernames
impacket-lookupsid "":""@10.10.200.245 | tee usernames
impacket-lookupsid 'guest'@10.10.129.91