Bloodhound

Gathering Data

nxc ldap [ds-host] -u [username] -p '[password]' --bloodhound --dns-server [dns ip] --collection all

Bloodhound is a tool that works best with video demonstrations - here's a great video by John Hammond with the SpecterOps team: