# User enumeration

> It is NOT recommended to brute force credentials due to account lockout policies that we cannot enumerate on the domain controller.

```bash
kerbrute userenum --dc 10.10.253.172 --domain spookysec.local users_to_test.txt --output users_to_test.log
```

{% embed url="https://github.com/ropnop/kerbrute" %}
