adPEAS

Invoke-adPEAS -Module Domain,Creds,Delegation

AD privilege escalation scanner that identifies misconfigurations, weak credentials, and delegations.

When you have a domain user and want to quickly find privilege escalation paths. adPEAS (from the PEAS family) gives you a summary of misconfigured GPOs, credentials in SYSVOL, dangerous ACL permissions, and delegations.

If the domain is very large, the scan can be slow. Also if you prefer more comprehensive tools like BloodHound.