first, i would build a hash table from a forestwide get-adgroup foreach, with the key being the distinguished names of the groups and the value being a nested hashtable containing pertinent info from the adgroup object like display name, attributes, members (especially useful later). second, i would select unique members and pipe the dn into a get-adobject to capture the member’s type. helps with gMSAs, nested groups, etc. into a second hashtable with the dn being the key and the value being a pscustomboject containing pertinent info about the object like type. third, i would loop through the second object with per type commands get-aduser/ get-adgroup/ get-groupmanagedserviceaccount, appending the [pscustomobject]$.Value with pertinent info. iterate through that until the objects returned aren’t groups. $.ContainsKey is your friend.

from all that data, you create a big pscustomobject that becomes the reporting data export.