> For the complete documentation index, see [llms.txt](https://activedirectory.mrw0l05zyn.cl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://activedirectory.mrw0l05zyn.cl/recoleccion-de-informacion-y-enumeracion/enumeracion-autenticada/enumeracion-de-access-control-list-acl.md).

# Enumeración de Access Control List (ACL)

## Windows

### PowerView

Enumeración de ACL.

```powershell
Get-DomainObjectACL
```

Enumeración de ACL por objeto.

```powershell
Get-DomainObjectACL -SamAccountName <user> –ResolveGUIDs
```

```powershell
$sid = Convert-NameToSid <user>
Get-DomainObjectACL -ResolveGUIDs -Identity * | ? {$_.SecurityIdentifier -eq $sid}
```

Enumeración de ACL por grupo.

```powershell
$sid = Convert-NameToSid "<group-name>"
Get-DomainObjectACL -ResolveGUIDs -Identity * | ? {$_.SecurityIdentifier -eq $sid}
```

Obtención de ACL interesantes.

```powershell
Find-InterestingDomainACL -ResolveGUIDs
```

## BloodHound

* Node Info -> Outbound Control Rights
  * First Degree Object Control
  * Group Delegated Object Control
  * Transitive Object Control