ADWSDOMAINDUMP

Summary from the TLDR InfoSec newsletter

ADWSDomainDump is an Active Directory domain dumper that uses ADWS (port 9389) instead of LDAP to enumerate AD objects, bypassing both Microsoft Defender for Endpoint and CrowdStrike Falcon detection.