Find the SID of the bob.smith user

HTB Content
1

So I couldn’t find the answer on this when I searched it when I needed it so I’ll just create a draft for this.
Since academy says to user Get-WmiObject, that is exactly what we’re going to do, the needed command is: Get-WmiObject -Class Win32_UserAccount. In this case this is good enough on its own, because there aren’t a lot of users on the machine, but what if you were connected to a server with 1000 users, well this idea doesn’t look appealing so the better command if you know the name of the user is: Get-WmiObject -Class Win32_UserAccount -filter “name = ‘bob.smith’”.
And your answer is…(drumroll)… :
image

2 Likes
2

Thanks for the suggestion.

4

To search for all users SID I would suggest to type this command " wmic useraccount get name,sid "
:slightly_smiling_face: This is how I approached it in my opinion.

1 Like