Password audit looks wrong? Check disabled users

[danti1988]

If the password audit numbers don't look right, high or low, check that disabled accounts are actually marked disabled.

On large collections the enabled property can come back as null or empty, which throws the counts out.

MATCH (u:User) RETURN u.enabled AS enabled, count(*) AS n

Any null in that result means it wasn't ingested properly. Give the BloodHound containers more resources and rerun SharpHound.