dievus/adpulse

ADPulse is a read-only Active Directory security scanner. An operator supplies a domain and password or hash; the CLI resolves or accepts a domain controller, binds over LDAP(S), runs security checks, and renders selected reports. The check suite covers identity and authentication risks, domain configuration and infrastructure, permissions and delegation, and SYSVOL/legacy-protocol issues; findings feed scoring and report formats. The README documents all 35 checks, but the sampled check source is partial, so the graph groups checks by capability rather than asserting internal call order.