Active Directory Review Without BloodHound: Limits
Review authorized Active Directory evidence for identities, nested privilege, delegated control, GPOs and trusts. Record collection scope and unexamined relationships so a missing item in an export is not mistaken for proof that no access path exists.