What it does:
Collects sessions, ACLs, trusts, local admins and more.
Outputs JSON/ZIP for BloodHound ingestion.
Multiple collection methods (LDAP, SMB, RPC).
Essential for AD attack-path visibility.
C# collector that enumerates AD artifacts to feed BloodHound graphs.