BloodHound Community Edition (CE) is a free and open-source tool focused on enabling organizations to identify, test, and validate attack path risk in Active Directory, Entra ID, and Azure environments.
Key Features:
- Attack Path Discovery: Uses graph theory to reveal hidden and unintended relationships.
- Containerized Deployment: Simplifies and accelerates deployment.
- REST API Support: Enables interaction with data through REST APIs for enhanced automation and integration.
- Enterprise-Grade User Management: Includes role-based access control (RBAC), two-factor authentication, and SAML support.
- Protected Cypher Searches: Offers safe and efficient query execution with built-in guardrails.
Use Cases:
- Attack Path Identification: Identify complex attack paths that would otherwise be impossible to identify quickly.
- Privileged Relationship Understanding: Helps blue and red teams better understand privileged relationships in Active Directory, Entra, and Azure environments.
- Security Testing: Enable organizations to identify, test, and validate Attack Path risk.