list Stuff I've Been Recommended but just haven't checked out yet... Plumhound for visualizing Active Directory server vulnerabilities