We’ve compromised a user. Now what?

There are few tools that offer quick, and efficient enumeration

Domain Enumeration with ldapdomaindump

Blood hound enumeration

PlumHound