PingCastle

PingCastle.exe --healthcheck --server <dc-ip>

AD auditing tool that generates a report of risks and insecure configurations.

When you need a comprehensive AD security report (similar to ADRecon but more risk-focused). PingCastle evaluates domain configuration, delegations, policies, and provides a security score. Useful for pentesters who want an executive risk report.

If the domain is very large, execution can be slow. Also if you prefer more visual tools like BloodHound.