Harden-Sysvol is an open-source PowerShell module that lets administrators audit the SYSVOL folder of an Active Directory domain. It searches more than forty file extensions for sensitive data such as passwords and hashes, flags suspicious binaries, checks exportable certificates and private keys, and reviews access permissions (ACLs) on files and folders. It runs on Windows 10/11 or Windows Server with an ordinary domain account and is installed from the PowerShell Gallery. The result is a report for security and administration teams.
Harden-Sysvol is one of the tools of the Harden community, a French association (association loi 1901) that aims to help small and medium-sized companies improve their information security. The code is on GitHub under the AGPL-3.0 licence; the Harden website describes the tools as free for non-commercial use. You run the module yourself in your own domain environment, so the analysis stays local and no data goes to the developers. The project is listed in the French government's catalogue of recommended free software (SILL).