Too often in Incident Response work I end up spending as much time doing regular system administration work as doing the IR work. One job I was on recently was almost all system admin work. One job I got was to evaluate the health of their Active Diretory environment. Being the lazy person I am I created a quick and dirty script to gather the required information. get-adhealth.ps1
It should be run with domain admin credentials to get all the information.