See some of the checks in https://github.com/azauditor/ADAudit/blob/master/PowerShell/Get-ADAuditData.ps1 - [ ] OU ACLs - [ ] Get-GPOResults with HTML output for each GPO