PingCastle

Find misconfigurations and enumerate AD issues

PingCastle.exe --healthcheck --server local.cyberbotic.nl

Make sure to set under options -> no enum limit

Scanners

PingCastle has a couple useful built-in scanners:

These can be useful to check shares, AV presence, SMB Signing and spooler presence, among other things.

Export

Also make sure to export all Computers, this includes useful info like exact Windows versioning:

(possible from main menu, export)

Tooling

• https://www.pingcastle.com/