NTObjectManager Tradecrafts

Get-ComDatabase -setcurrent

Change File/Registry Permisson

$sddl = "FILL_IN_SDDL_STRING"
## for SpecterService
$FolderToConfigure = "FILL_IN_FILE_PATH"
## Folder path
$securityDescriptor = Get-Acl -Path $FolderToConfigure
$securityDescriptor.SetSecurityDescriptorSddlForm($sddl)
## set it
Set-Acl -Path $FolderToConfigure -AclObject $securityDescriptor
#apply

Get All CLSIDs Windows

Get-ChildItem -Path Registry::HKEY_CLASSES_ROOT\\CLSID

Download Symbols

cd "C:\\Program Files (x86)\\Windows Kits\\10\\Debuggers\\x64\\"
symchk /s srv*c:\\SYMBOLS*<https://msdl.microsoft.com/download/symbols> C:\\Windows\\System32\\*.dll

List all domain controlled in a domain, You

$a = new-object 'System.DirectoryServices.ActiveDirectory.DirectoryContext'("domain", "other.domain.local" )
[System.DirectoryServices.ActiveDirectory.DomainController]::FindAll($a)

List Named Pipes

[System.IO.Directory]::GetFiles("\\\\.\\\\pipe\\\\")

[ ] Show Full output

SOMETHING SOMETHING | format-list *

Better View for SDDL

$descriptor = [System.Security.AccessControl.FileSecurity]::new()
$descriptor.SetSecurityDescriptorSddlForm("O:BAG:S-1-5-21-886914546-2374765512-2686207084-513D:AI(A;;0x13019f;;;WD)(A;ID;FA;;;SY)(A;ID;FA;;;BA)(A;ID;0x1200a9;;;BU)")
$descriptor.Access

ConvertSDDL

Notice SDDL can apply to Service and Registry and file permissions. So PowerShell has a -Type for specifying to help make better sense

ConvertFrom-Sddlstring "FILL_SDDL" -Type FileSystemRights