It has used networkdll for network discovery and psfin specifically for financial and point of sale indicators. It has also used AdFind, nltest/dclist, and PowerShell script Get-DataInfo.ps1 to enumerate domain computers, including the domain controller.