Your new best friend: Introducing BloodHound Community Edition!

The Australian Signals Directorate has hired American firm SpecterOps to train its agents as part of a strategy to strengthen its cyber incident response capacity. - 06/05/2021

As we’re continuing to approach our summer launch, many of you have asked us for a simple breakdown of BloodHound Enterprise vs BloodHound…

Table of Contents:

Screensavers for macOS Persistence

Explore lateral movement from Azure AD to on-prem AD using Microsoft Endpoint Manager. Learn how hybrid devices can be exploited for cross-domain attacks.

Active Directory Certificate Services has a lot of attack potential!

NTLM relay attacks have been around for a long time. While many security practitioners think NTLM relay is a solved problem, or at least a not-so-severe one, it is, in fact, alive and kicking and arguably worse than ever before. Relay attacks are the easiest…

It’s been almost a year since I published A Change of Mythic Proportions where Apfell was rebranded to Mythic. Since then, a lot has…

Ghostwriter is a part of your team. It helps you manage clients, projects, reports, and infrastructure in one application.

Your new best friend: Introducing BloodHound Community Edition!

Ghostwriter is a part of your team. It helps you manage clients, projects, reports, and infrastructure in one application.

Prior Work

Learn how to identify AD problems with high-privilege Kerberos users, domain control object ownership, and domain users using BloodHound FOSS.

When we coined the term “Attack Path Management” (APM) in our post ‘The Attack Path Manifesto’ in May of 2021, we set out to bring…

3 Foundational Pillars for Attack Path Management: Pillar 2 — Empirical Impact Assessment Attack Paths are the chains of abusable privileges and user behaviors that create direct and indirect connections between Active Directory Users and Computers. The unintended…

Introducing BloodHound 4.1 — The Three Headed Hound Prior Work Analyzing Active Directory attack paths using graph theory is not a new concept. Prior work includes the following: Heat-ray by John Dunagan, Alice Zheng, and Daniel R. Simon (2009) Airbus BTA…

Attack Path Management Pillars: Part 3 —Practical AD Security Remediation Guidance Historically, Identity Attack Paths are a double edge sword; remediation efforts can easily break production applications or create more Attack Paths. Unfortunately, fixing…

Rethinking the way that we approach phishing as a component of red team operations

In July of 2021, we launched BloodHound Enterprise. Since then, our customers have been using BHE to easily identify and eliminate…