Join us December 18th for our BloodHound Live: Monthly Release Recap!
Register Now
Services
PROGRAM DEVELOPMENT
Overview
Developing Capabilities
Expert Support
Assessments
Penetration Testing
Red Team Engagements
Purple Team Assessments
Maturity Assessments
AD Attack Path Assessments
Products
BLOODHOUND
BloodHound
Community Edition
Overview
GitHub
Get Started
BloodHound
Enterprise
Overview
What is Attack Path Management?
Interactive Demos
BloodHound Feature Comparison
Use Cases
Privileged Access Governance and Compliance
Scaling Beyond BloodHound Community Edition
Eliminate Lateral Movement
Manage Identity Risk
Mergers and Acquisitions
Industry
Public Sector
Financial Services
Healthcare
Support
Get a Demo
Go to Slack
Training
Adversary Tactics Training Courses
Red Team Operations
Identity-Driven Offensive Tradecraft
Tradecraft Analysis
Detection
Vulnerability Research for Operators
Active Directory Security Fundamentals
Azure Security Fundamentals
Private Training
Talk to us
Partners
SpecterOps
Partner Program
Identify your customers attack paths
before attackers do
Become a Partner
Partner Portal Sign In
About
ABOUT US
Who We Are
Values
Team
Careers
News
Announcements
Newsroom
Resources
White Papers
Case Studies
Sponsored Tools
Vulnerability Acknowledgements
Datasheets
Blog
Events
Sponsored Events
Talks
Training Courses
Webinars
Meet Ups
Contact Us
FEATURED BLOG
Maestro: Abusing Intune for Lateral Movement Over C2
Read Post
See All Posts
All
Active Directory
Active Directory Security
Attack Path Management
Azure
Azure Active Directory
Blog
Bloodhound
Bloodhound Enterprise
Credentials
Cybersecurity
Hacking
Information Security
Linux
Microsoft
Offensive Security
Penetration Testing
Ransomware
Red Team
Research
Solutions
Windows
Search
Blog
Latest Posts
Explore on Medium
18 Min Read | Oct 24
Domain of Thrones: Part I
Written by Nico Shyne & Josh Prager The Game of Domain Dominance Just as in the political landscape of Westeros, defenders face a dynamic adversarial relationship…except instead of fighting rival families, [...]
14 Min Read | Oct 20
On Detection: Tactical to Functional
5 Min Read |
Bloodhound Enterprise: securing Active Directory using graph theory
14 Min Read | Oct 18
Uncovering RPC Servers through Windows API Analysis
5 Min Read | Oct 09
Perfect Loader Implementations
10 Min Read | Sep 25
SCCM Hierarchy Takeover
6 Min Read | Sep 20
Ghostwriter v4: 2FA, RBAC, and Logging, Oh My!
Ghostwriter v4 is officially here! Technically, it’s been available as a release candidate for a while, but we have arrived at its final release. This major release focuses on something [...]
18 Min Read | Sep 19
Reactive Progress and Tradecraft Innovation
10 Min Read | Sep 14
What is Tier Zero — Part 2
PREV
<
5
6
7
8
9
10
11
>
NEXT
Get Started
Defend Against
Advanced Attacks
Talk to an Expert