Port 5985 is open, meaning we can use Evil-WinRM later—no need for RDP.

Find domain: DC=htb,DC=local

There are several reasons why is frequently recommended as a "must-do" machine: