T1033 - User Session Enumeration

T1033 - User Session Enumeration
Tools Sharphound Get-NetSession
(PowerView)		 NetSess Impacket
Managed Code Platform Invoke (P/Invoke)
Windows API Functions netapi32!NetSessionEnum
srvcli!NetSessionEnum
rpcrt4!NdrClientCall4
Remote Procedure Call [MS-SRVS] Server Service Remote Protocol
4b324fc8-1670-01d3-1278-5a47bf6ee188
NetrSessionEnum (Opnum 12)
C:\WINDOWS\SYSTEM32\srvsvc.dll
Network Protocol RPC over SMB (ncacn_np)
\PIPE\srvsvc