Alternatives to ADRecon
A PowerShell script that gathers Active Directory information and builds an Excel report of the environment. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
ADRecon
A PowerShell script that gathers Active Directory information and builds an Excel report of the environment.
Replacements
Listings that take over the same core job as ADRecon.
PingCastle
Active Directory security assessment tool that scores risky configuration.
PingCastle scans Active Directory and produces a readable risk report with a maturity score, but it is closed source and commercial use of the full feature set needs a paid Netwrix licence.
Purple Knight
A free Windows tool that assesses Active Directory, Entra ID and Okta for security weaknesses.
Purple Knight assesses on-premises AD, Entra ID and Okta against more than 230 indicators with remediation guidance, but it is a closed-source Windows tool rather than an open PowerShell script.
SharpHound
A C# collector that gathers Active Directory data for attack path analysis in BloodHound.
SharpHound is a C# collector for BloodHound that gathers Active Directory data for attack path analysis rather than producing an Excel report.
BloodHound Community Edition
Maps attack paths through Active Directory and Entra ID relationships.
BloodHound Community Edition maps attack paths through Active Directory and Entra ID relationships instead of exporting a formatted domain report.
AzureHound
A command-line collector that exports Microsoft Azure and Entra ID data for analysis in BloodHound.
AzureHound collects Azure and Entra ID data for BloodHound rather than on-premises Active Directory, as a Go program running on several platforms.
ADAudit Plus
A Windows auditing tool that tracks changes in Active Directory, file servers, Windows servers and workstations.
ADAudit Plus tracks changes across AD, Entra ID, servers and workstations as an ongoing audit trail rather than a one-time report.
Certipy
Audit Active Directory Certificate Services configurations.
Certipy audits Active Directory Certificate Services configurations specifically, a narrower focus than ADRecon's broad domain documentation.
Similar software
Related functionality, not a direct replacement.
Specops Password Auditor
A free Windows tool that audits Active Directory passwords for weak, reused and compromised credentials.
Netwrix Auditor Community Edition
A free edition of Netwrix Auditor that tracks changes in Active Directory, file servers and Windows.
NetExec
Assess network services during authorized enterprise security tests.
