Integrations

BloodHound Enterprise Integrations

SpecterOps is built on community. Our strategic integrations enable BloodHound Enterprise customers to extend identity attack path management to proactively secure and manage their identity infrastructure and to respond faster to threats.

BloodHound Enterprise Integration Partners

The BloodHound Enterprise integration for Cortex XSOAR lets you ingest and manage BloodHound Enterprise attack path findings in Cortex XSOAR as incidents.

The BloodHound Enterprise Splunk SOAR integration includes the ability to pull findings into a SplunkSOAR environment, as well as to enrich alerts from other platforms via data from BloodHound Enterprise.

The BloodHound Enterprise Splunk SIEM App enables customers to ingest Path, Posture, and Impacted Principals data into Splunk. The app also includes pre-built dashboards and alerts for Exposure, Path Details, and Impacted Principals.

Add two-factor authentication and flexible security policies to BloodHound Enterprise SAML 2.0 logins with Duo Single Sign-On.

The BloodHound Enterprise ServiceNow Security Incident Response integration provides the ability to generate tickets to track and monitor vulnerabilities within environments, as identified by BloodHound Enterprise.

The Vulnerability Response (VR) integration for BloodHound Enterprise enables organizations to seamlessly connect their BloodHound Enterprise tenant with ServiceNow’s Vulnerability Response capabilities, providing automated vulnerable item creation and management based on attack path findings.

Integrating with SpecterOps BloodHound Enterprise helps you reduce the risk of attacks by enabling you to easily identify, prioritize, and eliminate the most vital avenues that attackers can exploit.

The Axonius integration enables users to fetch and catalog users and devices from BloodHound Enterprise, providing visibility into identity relationships and potential attack paths

The SpecterOps BloodHound Python SDK allows users to build custom integrations, extending BloodHound’s capabilities.

The BloodHound Enterprise Google Security Operations (SecOps) is an integration that automatically syncs Bloodhound Enterprise (BHE) attack path findings to SecOps cases for remediation tracking. The integration enables security teams to manage and track the remediation of Active Directory and Azure attack paths directly within their existing SecOps workflows.

KEY ELEMENTS OF AN APM PRACTICE

The identity attack path management practice: your strategic foundation

Making identity attack path management effective isn’t just about technology — it’s about establishing it as a practice within your cybersecurity program.

Explore Identity APM maturity model

Operational blueprints

Best practices for implementing, maintaining, and scaling your Identity APM capability

Organizational alignment

A unified view that shows how identity relationships flow across your entire environment — from on-prem to cloud to SaaS applications.

Skills and mindset

Adversary-first thinking and the technical capabilities to operationalize it

Integration points

Integration guidance for integrating Identity APM within your existing security program and stack

Ready to get started?

See how BloodHound Enterprise eliminates millions of attack paths while focusing your defenses on the routes attackers actually use to reach your critical assets.