🧰 SharpHound

The items that name it 7

• Artificial Intelligence (AI) in Cybersecurity, Part 28: Using ADStrike to Compromise Active Directory
  writeup2026-10-12

  Run by ADStrike to collect Active Directory data, which the tool's AI then analyzes to find attack paths and high-value accounts.

• Living off The Browser: Running Popular Hacking Tools Inside Chrome
  writeup2026-10-06

  Active Directory enumeration/data collection tool bundled in the IWA

• AWSHound: An Open-Source AWS OpenGraph Collector
  writeup2026-08-19

  BloodHound collector cited as establishing the collector pattern AWSHound follows

• AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
  writeup2026-07-08

  Off-the-shelf AD enumeration binary recognizable by security tools via file hash/signature (contrasted with unique vibe-coded scripts).

• 0xSteph/pentest-ai-agents
  repo2026-05-06

  AD collection tool referenced in example query about converting SharpHound EXE to shellcode

• The (!FALSE) Pattern | Huntress
  writeup2026-01-29

  AD enumeration tool discussed in Part 3; consistently uses SDFlags:0x7 or 0x4/0x5 only when needed for security descriptor enumeration, differing from SOAPHound's behavior

• SDFlags | Huntress
  article2026-01-15

  BloodHound's data collector; enumerates AD objects and queries nTSecurityDescriptor with SDFlags (0x4 for general enumeration, 0x5 for groups/cert templates) to map attack paths