script to match hashcat cracked file to the username of NTLM hashes file
python hashcatmatch.py [DC-Hashes file] [cracked file from hashcat]
To check if users are stored in LM Hash format; use secretsdump to extract hashes
python lm-info.py [DC-Hashes.ntds from secretsdump]
I tend to use windapsearch.py, https://github.com/ropnop/windapsearch
python userdes.py [extracted dump with windapsearch] > user-description
python udeslyze.py [user-description] [company name i.e. microsoft]
python enumgroups.py allinfo