rapid7/metasploit-framework — pull request #2107 by staaldraad (2013-07-15 20:07:41+00:00)
Title: enum_domain_users post module

Once having gained an initial foothold on a Windows domain and looking to steal a Domain Administrator token, it is useful to know which host to target next based on the likelihood that a valid Domain Administrator token will be available on that host.