AI Active Directory Agent: Guided AD Enumeration with a Full Audit Trail

Active Directory enumeration is one of the most procedural parts of an internal engagement, and also one of the easiest to do inconsistently under time pressure. The AI Active Directory Agent is designed to turn that procedure into a guided workflow: walking through domain and domain-controller discovery, credential intake, and NTLM and null-session checks in a consistent order every time.

Like RTFMv2's other AI-driven agents, it runs on top of the framework's shared AiManager/provider-client stack rather than a bespoke integration, meaning it works with whatever OpenAI, Ollama, LM Studio, or llama.cpp endpoint an operator already has configured for the rest of the tool.

Rather than replacing the operator's existing AD tooling, the agent is meant to orchestrate it -- suggesting the next logical step based on what's already been discovered, and surfacing the reasoning behind each suggestion so it stays auditable. The result is a faster on-ramp into AD enumeration for less experienced operators, and a consistency check for experienced ones who want to make sure nothing gets skipped on a long engagement.