Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

BloodHound Community Edition

Noise: RESTRICTED_ACCESS_BLUR_MARKER

AD Enumeration

Domain Enumeration

BloodHound Community Edition (CE) is a self-hosted web application and API that ingests graph data and analyzes identity and access relationships to identify attack paths. Separate tools such as SharpHound and AzureHound collect Active Directory and Azure/Entra data; BloodHound CE does not itself perform endpoint or directory collection. Through OpenGraph extensions, it can also model data from other identity providers, developer platforms, device-management systems, and custom sources. Match collectors to the version recommended by the deployed CE instance. Built-in Cypher queries and UI mark-as-owned workflows can be referenced via the Administration and Explore tabs.

Source

https://github.com/SpecterOps/BloodHound

References

bloodhound.specterops.io bloodhound.specterops.io bloodhound.specterops.io bloodhound.specterops.io github.com

+4 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER