Kerbrute

./kerbrute_linux_amd64 userenum --dc <dc-ip> -d <domain> <userslist.txt>  // [!code highlight]

--dc The location of the Domain Controller (KDC) to target. If blank, will lookup via DNS
-d,  --domain string      The full domain to use (e.g. contoso.com)