The Identity at the Core

# AD Service Account Auditor v2.1
# Identity at the Core Toolkit

Import-Module ActiveDirectory

function Get-StaleServiceAccounts {
  param(
    [int]$DaysInactive = 90,
    [string]$SearchBase,
    [switch]$IncludeDisabled
  )

  $cutoff = (Get-Date).AddDays(-$DaysInactive)

  # Discover all service accounts
  $svcAccounts = Get-ADUser -Filter {
    ServicePrincipalName -ne "$null"
  } -Properties LastLogonDate,
    PasswordLastSet, SPNs, Description

  # Risk scoring algorithm
  $svcAccounts | ForEach-Object {
    $risk = Calculate-RiskScore $_
    $_ | Add-Member RiskScore $risk
  }
}