Permission Groups Discovery: Domain Groups

Threat Actors may attempt to find domain-level groups and permission settings. The knowledge of domain-level permission groups can help Threat Actors determine which groups exist and which users belong to a particular group. Threat Actors may use this information to determine which users have elevated permissions, such as domain administrators.