ANSSI-FR/AD-control-paths

• highreadme#1

  Clarify the existing license(s) in the README

  原因：

  复制粘贴的修复

  复制

  ## License
  This project is distributed under a custom license. Please refer to the `LICENSE` file in the repository for full details on the applicable terms and conditions.

  待办完成忽略
• mediumreadme#2

  Strengthen the README's opening to explicitly position the tool

  原因：

  当前

  # Active Directory Control Paths
  
  ## "Who Can Read the CEO's Emails Edition"
  
  Control paths in Active Directory are an aggregation of "control relations" between entities of the domain (users, computers, groups, GPO, containers, etc.) which can be visualized as graphs (such as above) and whose purpose is to answer questions like "Who can get 'Domain Admins' privileges ?" or "What resources can a user control ?" and even "Who can read the CEO's emails ?".

  复制粘贴的修复

  复制

  # ANSSI-FR/AD-control-paths: Active Directory Control Path Auditing and Graphing
  
  This tool helps cybersecurity professionals, auditors, and defenders identify and visualize exploitable control paths within Active Directory. Unlike broader attack path mapping tools, ANSSI-FR/AD-control-paths specifically focuses on aggregating 'control relations' between AD entities (users, computers, groups, GPO, containers) to answer critical questions like 'Who can get Domain Admins privileges?' or 'Who can read the CEO's emails?'. It provides a unique perspective on how modification rights on objects can lead to control over other objects, leveraging graph visualization for deep security assessment.

  待办完成忽略

本次扫描解析到的品类 GEO 通道：google/gemini-2.5-flash, deepseek/deepseek-v4-flash

• 品类问题

  How to identify potential privilege escalation paths in Active Directory environments?

  你：未被推荐
  AI 推荐顺序：

  1. BloodHound
  2. ADRecon
  3. PowerView
  4. PingCastle
  5. ADExplorer
  6. Grouper2

  AI 推荐了 6 个替代方案，却始终没点名 ANSSI-FR/AD-control-paths。这就是要补上的差距。

  查看 AI 完整回答
• 品类问题

  Tools to visualize complex Active Directory permissions and control relationships?

  你：未被推荐
  AI 推荐顺序：

  1. BloodHound
  2. Netwrix Auditor
  3. ADAudit Plus
  4. Active Directory Explorer
  5. PowerShell
  6. Graphviz
  7. PingCastle
  8. Semperis Directory Services Protector

  AI 推荐了 8 个替代方案，却始终没点名 ANSSI-FR/AD-control-paths。这就是要补上的差距。

  查看 AI 完整回答

• Metadata completeness

  warn

  建议：

• README presence

  pass

• Compared to common alternatives in this category, what is the core differentiator of ANSSI-FR/AD-control-paths?

  pass
  ✓AI 明确点名了 ANSSI-FR/AD-control-paths

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• If a team adopts ANSSI-FR/AD-control-paths in production, what risks or prerequisites should they evaluate first?

  pass
  ✓AI 明确点名了 ANSSI-FR/AD-control-paths

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• In one sentence, what problem does the repo ANSSI-FR/AD-control-paths solve, and who is the primary audience?

  pass
  ✓AI 明确点名了 ANSSI-FR/AD-control-paths

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？