🧰 BloodHound

The items that name it 26

• Datadog pathrunner: AWS IAM privilege escalation framework
  toolas tools2026-10-20It is written here as Bloodhound: widely used offensive and defensive security tool, cited as example.
• Artificial Intelligence (AI) in Cybersecurity, Part 28: Using ADStrike to Compromise Active Directory
  writeupas tools2026-10-12

  Used to view privileges held by computer accounts and users in the Active Directory environment.

• M-med/Active-Directory-Simulation-Attack-
  repoas classification.technologies2026-10-04
• [tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically
  articleas tools2026-10-01

  Graph tool that CiliumHound extends through OpenGraph

• Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
  articleas tools2026-09-17

  Active Directory attack path analysis tool used alongside RustHound/NetExec for identifying lateral movement and privilege escalation paths.

• Awesome Cybersecurity Agentic AI
  repoas affected products2026-08-31

  Active Directory analysis and attack path discovery

• [tl;dr sec] #343 - Hugging Face Technical Report, AWSHound, OWASP Agentic Skills Top 10
  articleas classification.technologies2026-08-27
• ADScanPro/Claude-AD
  repoas classification.technologies2026-08-24
• AWSHound: An Open-Source AWS OpenGraph Collector
  writeupas classification.technologies2026-08-19
• Dark-Moon
  repoas classification.technologies2026-08-05
• Awesome Offensive AI Agentic Landscape
  repoas classification.technologies2026-08-01
• Speeding Up AD Pentests with ADScan & ADPulse
  writeupas classification.technologies2026-07-31
• awesome-osint-arsenal
  repoas tools2026-07-31It is written here as BloodHound (AD attack path analysis).

  AD attack path analysis

• icedracon/adhammer
  repoas classification.technologies2026-07-17
• AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
  writeupas tools2026-07-08

  Off-the-shelf offensive AD reconnaissance tooling historically identified by defenders via signatures/behaviors.

• From Code to Coverage (Part 6): What netlogon.log Sees That Event 1644 Never Will
  writeupas tools2026-06-24

  Authenticated AD enumeration tool referenced as part of the detection series

• elementalsouls/Claude-BugHunter
  repoas tools2026-05-22

  AD attack path mapping; mentioned as internal AD tool, out of scope for this bundle

• 0xSteph/pentest-ai-agents
  repoas tools2026-05-06

  AD attack path analysis tool referenced (BloodHound, bloodhound-python)

• dMSA Ouroboros: Self-Sustaining Credential Extraction in Windows Server 2025
  writeupas tools2026-05-04

  AD attack path graphing tool; article proposes new edges (CreateDMSA, BadSuccessor, OuroborosSelfEnroll) and detection queries for dMSA Ouroboros; credited to no single author in text, used by red teamers/attackers per article.

• The 60ms Window: How Event 5156 Solves the ADWS Attribution Problem
  writeupas tools2026-04-09

  AD attack path enumeration tool; context of the Slack #red-team discussion and detection challenge referenced

• The ADWS Architecture That Hides PowerShell AD Enumeration
  writeupas tools2026-04-08

  AD enumeration/attack path tool referenced as also requesting full security descriptors (SDflags) like the observed attacker activity; referenced from Part 3 of the series

• SDFlags | Huntress
  articleas tools2026-01-15

  Attack path discovery tool that relies on permission relationships (nTSecurityDescriptor) in addition to membership data

• The OID Problem: Writing LDAP Detections That Actually Work
  writeupas tools2025-12-16

  Mentioned as an example of another LDAP-based reconnaissance tool the methodology could apply to (collectors)

• WriteAccountRestrictions (WAR) – What is it good for?
  writeupas tools2025-10-01

  Attack path mapping in Active Directory; version 8.0 added access control inheritance tracking used to trace WAR permission origin

• AzureHound Cypher Cheatsheet
  writeupas tools2020-11-23

  GUI tool for visualizing Azure AD attack paths using Cypher queries (Settings>Query Debug Mode)

• AWSHound — AWS BloodHound OpenGraph Collector
  repoas tools

  Graph format/target (OpenGraph) that AWSHound builds output for