Intro and Prior Work More and more organizations are adopting cloud computing, migrating existing business processes and creating new business processes in Azure, AWS, and GCP. One of the most common processes, and a category that each cloud computing vendor is heavily incentivized to support is DevOps. …

In July of 2021, we launched BloodHound Enterprise. Since then, our customers have been using BHE to easily identify and eliminate millions, even billions of attack paths in their on-prem Active Directory environments. Today I’m happy to announce support for Azure in BloodHound Enterprise. BloodHound Enterprise is an Attack Path…

Prior Work Analyzing Active Directory attack paths using graph theory is not a new concept. Prior work includes the following: Heat-ray by John Dunagan, Alice Zheng, and Daniel R. Simon (2009) Airbus BTA by Philippe Biondi, Joffrey Czarny, Xavier Mehrenberger, and Nicolas Bareil (2013) Active Directory Control Paths by Emmanuel Gras and…

Intro and Prior Work Microsoft’s Azure is a complicated system of principals, securable objects, and the various ways access is granted to those objects. Some privileged actions are tightly controlled by Azure AD roles, while other actions are controlled by roles and object ownership. …

Intro and Prior Work On-prem Active Directory is here to stay, and so is Azure Active Directory. While these products have similar names, they in fact work very differently from one another. There are hints of vanilla AD’s discretionary access control model in Azure, but permissions in Azure are mostly controlled through granted roles…

Five years ago, we released BloodHound on stage at DEFCON 24. Since then, BloodHound has helped reshape how penetration testers and red teamers execute engagements. …

Intro You don’t need me to tell you how dangerous and destructive ransomware is. …

Table of Contents: · What Are Attack Paths? · Directory Services: Active Directory · Why Active Directory Is the Adversary’s Favorite Target · Comparing Attack Path Management and Vulnerability Management · Why Attack Paths Are Challenging · Why Current Options to Address Attack Paths Fall Short · What Is Attack Path Management and How It Works · Attack Path Management…

Intro and Background We released BloodHound in 2016. Since then, BloodHound has been used by attackers and defenders alike to identify and analyze attack paths in on-prem Active Directory environments. Now, I am very proud to announce the release of BloodHound 4.0: The Azure Update. This release is authored by myself (Andy Robbins)…