• Provides GUI for AD entities and relationships for the data collected by its ingestors.
• Uses Graph Theory for providing the capability of mapping shortest path for interesting things like Domain Admins. https://github.com/BloodHoundAD/BloodHound
• https://github.com/fox-it/BloodHound.py
• https://github.com/fox-it/bloodhound-import
• https://github.com/hausec/Bloodhound-Custom-Queries
• There are built-in queries for frequently used actions.
• Also supports custom Cypher queries.

Invoke-BloodHound -CollectionMethod All

or

SharpHound.exe

.\sharphound.exe -d north.sevenkingdoms.local -c all --zipfilename bh_north_sevenkingdoms.zip
.\sharphound.exe -d sevenkingdoms.local -c all --zipfilename bh_sevenkingdoms.zip
.\sharphound.exe -d essos.local -c all --zipfilename bh_essos.zip

• To avoid detections like ATA

Invoke-BloodHound -CollectionMethod All -ExcludeDC

• Login session

  Invoke-BloodHound -CollectionMethod LoggedOn
  

Queries