HostRecon.ps1

Active Directory AD Enumeration windows

HostRecon collects:

Hostname / IP / current user / domain
Local users and admins
Netstat / DNS cache / shares
Scheduled tasks
Process listing
AntiVirus / Firewall info
LAPS, domain password policy, Domain Admins, Domain Controllers
Sysinternals Sysmon presence
Common security products
Web proxy info