Network Discovery – Windows

User Activity

PSTools is a collection of free command-line tools developed by Sysinternals, which was later acquired by Microsoft. These tools are designed to help IT professionals and system administrators manage and troubleshoot Windows systems more effectively. PSTools are commonly used in Windows environments to perform various tasks remotely or automate administrative tasks on local or remote machines.

Download:
https://learn.microsoft.com/en-us/sysinternals/downloads/psloggedon

1. List current user(s) logged into a machine:

psloggedon \\computername

2. Network loop scan:

for /L %i in (50,1,60) do psloggedon \\172.16.99.%i >> users_output.txt

( ^ Note: the range is adjusted to only scan addresses .50 - .60 to save time typically it would be “(1,1,254)” for all addresses on the network)