SharpHound
# stealthy default collections, note this is still very noisy and detectable
inproc-execute-assembly z:\tools\sharphound-obfuscated.exe --throttle 30000 --jitter 20 --zippassword infected --memcache --randomfilenames --domain client.fqdn.com --domaincontroller client.fqdn.com