Lots of rpcclient action against Active Directory.
rpcclient
https://hackso.me/sauna-htb-walkhthrough/
Nice writeup sir, especially that “enumerating Domain with rpcclient” phase.