1"use strict";(self.webpackChunkveil_framework=self.webpackChunkveil_framework||[]).push([[9592],{7192:function(e,t,a){a.r(t),a.d(t,{Head:function(){return h},default:function(){return p}});var n=a(8453),r=a(6540);function l(e){const t=Object.assign({h1:"h1",p:"p",h2:"h2",ul:"ul",li:"li",strong:"strong",a:"a"},(0,n.RP)(),e.components);return r.createElement(r.Fragment,null,r.createElement(t.h1,null,"Veil-PowerView"),"\n",r.createElement(t.p,null,"Veil-PowerView is the Active Directory enumeration and situational awareness module within the Veil Framework. It provides security teams with the ability to map domain structures, identify privileged accounts, enumerate shares, and analyze group policies â all capabilities that defensive teams need to understand in order to detect AD reconnaissance."),"\n",r.createElement(t.h2,null,"Module Overview"),"\n",r.createElement(t.p,null,"PowerView operates through standard Windows APIs and LDAP queries. This is both its strength and the reason it is difficult to detect: it uses the same interfaces as legitimate administrative tools. There are no exploits involved â just queries that any domain-authenticated user can run."),"\n",r.createElement(t.p,null,"For red teams, PowerView provides rapid situational awareness. For blue teams, understanding how it works is the foundation for detecting unauthorized reconnaissance in your environment."),"\n",r.createElement(t.h2,null,"Key Capabilities"),"\n",r.createElement(t.ul,null,"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Domain and forest enumeration")," â Map trust relationships, domain controllers, and organizational structure"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Privileged account discovery")," â Identify domain admins, service accounts, and accounts with special privileges"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Share enumeration")," â Find accessible file shares across the network"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"GPO analysis")," â Review group policy objects for security-relevant configurations"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,"Session tracking")," â Determine where specific users are currently logged in"),"\n"),"\n",r.createElement(t.h2,null,"Defensive Value"),"\n",r.createElement(t.p,null,"If you run a SOC or manage AD security, deploying PowerView in a lab and watching the resulting telemetry teaches you exactly what unauthorized enumeration looks like in your logs. This direct observation is far more valuable than reading theoretical descriptions of AD attacks."),"\n",r.createElement(t.h2,null,"Documentation"),"\n",r.createElement(t.ul,null,"\n",r.createElement(t.li,null,r.createElement(t.strong,null,r.createElement(t.a,{href:"/framework/veil-powerview/"},"Detailed PowerView Framework Documentation"))," â Complete module reference with detection strategies"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,r.createElement(t.a,{href:"/veil-powerview-usage-guide/"},"PowerView Usage Guide"))," â Practical usage reference"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,r.createElement(t.a,{href:"/category/veil-powerview/"},"PowerView Category"))," â Related articles and research"),"\n",r.createElement(t.li,null,r.createElement(t.strong,null,r.createElement(t.a,{href:"/hunting-users-veil-framework/"},"Hunting Users"))," â Detecting user enumeration activity"),"\n"))}var s=function(e={}){const{wrapper:t}=Object.assign({},(0,n.RP)(),e.components);return t?r.createElement(t,e,r.createElement(l,e)):l(e)},i=a(9329),c=a(1744),o=a(8963),m=a(8752),u=a(7304);function d(e){if(!e)return null;try{return new Intl.DateTimeFormat("en-GB",{day:"numeric",month:"long",year:"numeric",timeZone:"UTC"}).format(new Date(e))}catch{return null}}function f({pageContext:e,children:t}){const{frontmatter:a}=e,n=(null==a?void 0:a.title)||"",l=(null==a?void 0:a.description)||"",s=(null==a?void 0:a.slug)||"",c=(null==a?void 0:a.heroImage)||null,f=(null==a?void 0:a.date)||null,p=(null==a?void 0:a.lastmod)||null,h=d(f),E=p&&p!==f?d(p):null;return r.createElement(i.A,null,c&&r.createElement(o.A,{title:n,subtitle:l,backgroundImage:c}),r.createElement("article",{className:"page-content"},r.createElement("div",{className:"container"},h&&r.createElement("p",{className:"post-meta"},r.createElement("time",{dateTime:f},"Published ",h),E&&r.createElement(r.Fragment,null," · ",r.createElement("time",{dateTime:p}
1,"Updated ",E))),r.createElement("div",{className:"post-layout-grid"},r.createElement("div",{className:"post-main"},t),r.createElement("aside",{className:"post-sidebar","aria-label":"Sidebar"},r.createElement("div",{className:"post-sidebar-scroll"},r.createElement(u.A),r.createElement(m.A,{sourceUrl:s})))))))}function p(e){return r.createElement(f,e,r.createElement(s,e))}function h({pageContext:e}){const{frontmatter:t}=e,a=null!=t&&t.heroImage?`https://www.veil-framework.com${t.heroImage}`:null;return r.createElement(c.A,{title:null==t?void 0:t.title,description:null==t?void 0:t.description,pathname:null==t?void 0:t.slug},(null==t?void 0:t.date)&&r.createElement("meta",{property:"article:published_time",content:t.date}),(null==t?void 0:t.lastmod)&&r.createElement("meta",{property:"article:modified_time",content:t.lastmod}),a&&r.createElement("meta",{property:"og:image",content:a}),a&&r.createElement("meta",{name:"twitter:image",content:a}))}},7304:function(e,t,a){a.d(t,{A:function(){return l}});var n=a(6540);function r({href:e,children:t,className:a,...r}){return n.createElement("a",Object.assign({href:e,target:"_blank",rel:"sponsored nofollow noopener",className:a},r),t)}function l(){const e="/veil-recommends/infosec-fundamentals";return n.createElement("aside",{className:"fc-wrap","aria-label":"Recommended course"},n.createElement("div",{className:"fc-header"},n.createElement("span",{className:"fc-dot fc-dot-r","aria-hidden":"true"}),n.createElement("span",{className:"fc-dot fc-dot-a","aria-hidden":"true"}),n.createElement("span",{className:"fc-dot fc-dot-g","aria-hidden":"true"}),n.createElement("span",{className:"fc-header-label"},"course_spotlight.sh")),n.createElement(r,{href:e,className:"fc-image-link","aria-label":"View Information Security Fundamentals course"},n.createElement("img",{src:"/img/hero/infosec-fundamentals.webp",alt:"Information Security Fundamentals course cover",className:"fc-image",loading:"lazy",width:"300",height:"169"})),n.createElement("div",{className:"fc-body"},n.createElement("div",{className:"fc-tag"},"Recommended Course"),n.createElement("h3",{className:"fc-title"},n.createElement(r,{href:e,className:"fc-title-link"},"Information Security Fundamentals")),n.createElement("p",{className:"fc-desc"},"Build a solid foundation in cybersecurity. Covers network fundamentals, common attack vectors, defensive controls, and the mindset needed for security research."),n.createElement("ul",{className:"fc-features"},n.createElement("li",{className:"fc-feature"},n.createElement("span",{className:"fc-feature-icon","aria-hidden":"true"},"â¸"),"Beginner-friendly â no prior experience needed"),n.createElement("li",{className:"fc-feature"},n.createElement("span",{className:"fc-feature-icon","aria-hidden":"true"},"â¸"),"Network attacks & defences"),n.createElement("li",{className:"fc-feature"},n.createElement("span",{className:"fc-feature-icon","aria-hidden":"true"},"â¸"),"Real-world security concepts")),n.createElement(r,{href:e,className:"fc-cta"},"View Course",n.createElement("span",{className:"fc-cta-arrow","aria-hidden":"true"}," â")),n.createElement("p",{className:"fc-disclosure"},"We may earn a commission if you enrol via our link, at no extra cost to you.")))}},8453:function(e,t,a){a.d(t,{RP:function(){return l}});var n=a(6540);const r=n.createContext({});function l(e){const t=n.useContext(r);return n.useMemo(()=>"function"==typeof e?e(t):{...t,...e},[t,e])}},8752:function(e,t,a){a.d(t,{A:function(){return r}});var n=a(6540);function r({sourceUrl:e}){const{0:t,1:a}=(0,n.useState)("idle"),{0:r,1:l}=(0,n.useState)("");return n.createElement("aside",{className:"nl-sw-wrap","aria-label":"Newsletter signup"},n.createElement("div",{className:"nl-sw-header"},n.createElement("span",{className:"nl-sw-dot nl-sw-dot-r","aria-hidden":"true"}),n.createElement("span",{className:"nl-sw-dot nl-sw-dot-a","aria-hidden":"true"}),n.createElement("span",{className:"nl-sw-dot nl-sw-dot-g","aria-hidden":"true"}),n.createElement("span",{className:"nl-sw-title"},"intel_feed.sh")),n.createElement("div",{className:"nl-sw-body"},n.createElement("p",{className:"nl-sw-prompt"},n.createElement("span",{className:"nl-sw-caret","aria-hidden":"true"},"$")," ","subscribe --to evasion-intel"),n.createElement("h3",{className:"nl-sw-heading"},"Stay ahead of the curve"),n.createElement("p",{className:"nl-sw-desc"},"AV bypass techniques, detection gaps, and lab-tested research â delivered before the mainstream catches up."),"done"===t?n.createElement("div",{className:"nl-sw-success",role:"status"},n.createElement("span",{className:"nl-sw-check","aria-hidden":"true"},"â"),n.createElement("div",null,n.createElement("strong",null,"Subscribed."),n.createElement("br",null),n.createElement("span",{className:"nl-sw-success-sub"},"Confirm your email to activate."))):n.createElement("form",{onSubmit:async function(e){e.preventDefault();const t=e.currentTarget,n=new FormData(t);
1if(!n.get("company")){a("loading"),l("");try{const e=await fetch("/api/subscribe",{method:"POST",body:n}),r=await e.json();r.success?(a("done"),t.reset()):(a("err"),l(r.error||"Something went wrong."))}catch{a("err"),l("Network error â please try again.")}}},className:"nl-sw-form",noValidate:!0},n.createElement("input",{type:"hidden",name:"site",value:"veil-framework"}),n.createElement("input",{type:"hidden",name:"source_url",value:e||""}),n.createElement("input",{type:"text",name:"company",tabIndex:"-1","aria-hidden":"true",className:"nl-sw-hp",autoComplete:"off"}),n.createElement("label",{htmlFor:"nl-sw-name",className:"nl-sw-label"},"Your name"),n.createElement("input",{id:"nl-sw-name",type:"text",name:"name",placeholder:"alias or handle",required:!0,autoComplete:"given-name",className:"nl-sw-input",disabled:"loading"===t}),n.createElement("label",{htmlFor:"nl-sw-email",className:"nl-sw-label"},"Email address"),n.createElement("input",{id:"nl-sw-email",type:"email",name:"email",placeholder:"[email protected]",required:!0,autoComplete:"email",className:"nl-sw-input",disabled:"loading"===t}),"err"===t&&n.createElement("p",{className:"nl-sw-error",role:"alert"},r),n.createElement("button",{type:"submit",className:"nl-sw-btn",disabled:"loading"===t},"loading"===t?"Connectingâ¦":"Subscribe to intel â"),n.createElement("p",{className:"nl-sw-legal"},"No spam. No vendor fluff. Unsubscribe any time."))))}},8963:function(e,t,a){a.d(t,{A:function(){return r}});var n=a(6540);function r({title:e,subtitle:t,primaryLink:a,primaryText:r,secondaryLink:l,secondaryText:s,backgroundImage:i}){const c=i?{backgroundImage:`linear-gradient(135deg, rgba(37, 99, 235, 0.85) 0%, rgba(13, 33, 55, 0.9) 100%), url(${i})`,backgroundSize:"cover",backgroundPosition:"center"}:{};return n.createElement("section",{className:"hero blueprint-section-subtle",style:c},n.createElement("div",{className:"container"},n.createElement("h1",null,e),t&&n.createElement("p",null,t),(a||l)&&n.createElement("div",{style:{display:"flex",gap:"var(--space-md)",flexWrap:"wrap"}},a&&n.createElement("a",{href:a,className:"btn btn-primary"},r||"Get Started"),l&&n.createElement("a",{href:l,className:"btn btn-outline"},s||"Learn More"))))}}}]); 2//# sourceMappingURL=component---src-components-page-template-jsx-content-file-path-content-posts-veil-powerview-overview-mdx-1beda88da5322e322ad6.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.