Active Directory: Using LDAP Queries for Stealthy Enumeration
snikt.net