From c4ceaefb93125bbff4b862eadb13e57ff67544ef Mon Sep 17 00:00:00 2001 From: Argandov <67169222+Argandov@users.noreply.github.com> Date: Sat, 23 Jul 2022 20:23:39 -0500 Subject: [PATCH] Updated ExcludeDomainControllers section Added the --ExcludeDCs switch/flag (The ExcludeDomainControllers section didn't specify what flag needs to be used to exclude DCs) --- docs/data-collection/sharphound-all-flags.rst | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/docs/data-collection/sharphound-all-flags.rst b/docs/data-collection/sharphound-all-flags.rst index 72aa05a27..afe141ce5 100644 --- a/docs/data-collection/sharphound-all-flags.rst +++ b/docs/data-collection/sharphound-all-flags.rst @@ -118,11 +118,16 @@ OU, do this: ExcludeDomainControllers ------------------------ -This will instruct SharpHound to not touch domain controllers. By not touching +`--ExcludeDCs` will instruct SharpHound to not touch domain controllers. By not touching domain controllers, you will not be able to collect anything specified in the `DCOnly` collection method, but you will also likely avoid detection by Microsoft ATA. +:: + + C:\> SharpHound.exe -d contoso.local --ExcludeDCs + + RealDNSName -----------