[techspence]

Summary

• merge the existing dev work with the current main branch
• add LDAP credentials and explicit domain controller targeting
• keep the refactored findings and consolidated CSV output
• fix SYSVOL discovery, mapped path extraction, and false negatives found during DC01 testing
• update usage documentation and example output

Validation

• PowerShell parsing passed
• default discovery tested on DC01
• -Server DC01.dunder.corp -Domain dunder.corp tested on DC01
• staged unsafe ACLs, plaintext credentials, UNC paths, GPO scripts, and nonexistent shares were detected

-Credential applies to LDAP queries. UNC and SMB access continues to use the PowerShell process identity.

Closes #20
Addresses #23