Sadly, it is not self evident just how important it is to get a penetration test done at this company. I am rather rusty to this. Where is the hash table stored on a Win2016 DC these days?
I want to run a simple cracker against it, in order to probe for weak passwords and prove that people are not adhering to our policies and guidelines. This will then be the foundation for my argument of how vulnerable we are and how we need to get penetration testing done then improve our security policies.
Thanks in advance.