AD Groups Or Users Enumeration Using PowerShell - ScriptBlock (88f0884b-331d-403d-a3a1-b668cf035603)
Adversaries may attempt to find domain-level groups and permission settings. The knowledge of domain-level permission groups can help adversaries determine which groups exist and which users belong to a particular group. Adversaries may use this information to determine which users have elevated permissions, such as domain administrators.