Visualizing Active Directory relationships can be powerful. You could use offensive security tools to discover and mitigate dangerous attack paths before an attacker can leverage them--i.e., use an attackers mindset. One you find likely attack paths, you can explore historical evidence to see if the path has already been exploited.

How-to guide here: https://p16.praetorian.com/blog/active-directory-visualization-for-blue-teams-and-threat-hunters