# Reconnaissance

- [Find Domain Name](/cheatsheet/internalpentest/active-directory/reconnaissance/find-domain-name.md)
- [Find Domain Controllers](/cheatsheet/internalpentest/active-directory/reconnaissance/find-domain-controllers.md)
- [Enumerating Machines](/cheatsheet/internalpentest/active-directory/reconnaissance/enumerating-machines.md): It is important during an internal penetration test to enumerate alive machines in order to properly cartography the perimeter.
- [Enumerating Services](/cheatsheet/internalpentest/active-directory/reconnaissance/enumerating-services.md): We cannot enumerate every ports on every machines during an internal assessment (because of allotted time). We have to choose specific ports (smb, web ports, administrative ports, etc).
- [DNS Enumeration](/cheatsheet/internalpentest/active-directory/reconnaissance/dns-enumeration.md): DNS Enumeration is an important step to cartography the perimeter.