Active Directory program question

Hello friends,

question about AD clean up, monitoring and auditing. My company's AD is looking more and more like a Swiss cheese with lots of holes and in dire need of a cleanup. My company doesn't currently have such a program that targets AD for cleanup, and periodic auditing. Does anyone here find any framework or program (not app) that they used to start such a program at their company?

active directory auditing cheese cybersecurity directory find framework friends hello monitoring program question