.. / AD - nmap - Identify the Domain Controller

Use nmap to identify the Domain Controller.

Command Reference:

Network: 10.1.1.*

Command:

```
nmap -p 389,636 10.1.1.*
```

References:

https://nmap.org/download.html

https://nmap.org/nsedoc/scripts/krb5-enum-users.html