>_ shadow.red

SID/RID Bruteforce - impacket-lookupsid

Active Directory AD Enumeration linux

Anonymous brute via RPC

impacket-lookupsid anonymous@10.10.212.32 | tee usernames
impacket-lookupsid "":""@10.10.200.245 | tee usernames

As guest

impacket-lookupsid 'guest'@10.10.129.91