[Rabenherz112]

Thanks for taking the time to suggest an addition to awesome-sysadmin!

To ensure your Pull Request is dealt with swiftly, please check the following (check the boxes [x]):

• Submit one item per pull request. This eases reviewing and speeds up inclusion.
• Your addition is Free software.
• You have searched the repository for any relevant issues or PRs, including closed ones.
• Any software you are adding is not already listed at any of awesome-selfhosted, dbdb.io.
• Software you are submitting is not your own, unless you have a healthy ecosystem with a few contributors (which aren't your sock puppet accounts).
• The file you are adding is formatted as described in addition.md.
• Demo links should only be used for interactive demos, i.e. not video demonstrations. If login credentials are required to access the demo, please link to the credentials directly.
• Comments and unused optional fields have been removed.
• The file you are adding uses kebab-case file naming, for example my-awesome-software.yml.
• Values for platform should match the platforms required to install and run the software.
• Any software project you are adding to the list is actively maintained.
• Any software project you are adding was first released more than 12 months ago.
• Any software project you are adding has working installation instructions.
• You understand that your Pull Request will be merged at least ~1 week after approval, depending on maintainers time.

---

Please take some time to answer the following questions as best you can:

• Why is it awesome?

It is an agentless security assessment for Active Directory. It runs under an ordinary domain user account, needs no installation or prior configuration, and produces a self-contained HTML report with a risk score across four areas (stale objects, privileged accounts, trusts, anomalies). Findings come with an explanation and remediation guidance, so the same report works for admins and for management.

• Have you used it? For how long?

Yes, since 2023. A health check is run quarterly and after major changes.

• Is this in a personal or professional setup?

Professional setup

• How many devices/users/services/... do you manage with it?

Four prod. Active Directory domains.

• Biggest pros/cons compared to other solutions?

Pros: Currently there aren't still many reputable other free solutions for this kind of scan. There is Purple Knight, which I feel like results in more action items, however there code is closed source.

Cons: PingCastle is Windows/.NET only, and it is a point-in-time checklist assessment rather than attack-path analysis, so it
complements graph-based tooling like BloodHound rather than replacing it.

• Any other comments about your use case, things you've found excellent, limitations you've encountered... ?

N/A

[kokomo123]

LGTM, no issues here pending further thoughts from collaborators, this does look pretty interesting