MITRE ATT&CKsoftware (tool)
S0521 BloodHound
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.7
- Created
- 2020-10-28
Description
BloodHound is an Active Directory (AD) reconnaissance tool that can reveal hidden relationships and identify attack paths within an AD environment.
Related
Uses · MITRE ATT&CK (11)
- T1615 Group Policy Discovery technique
- T1069.001 Local Groups sub-technique
- T1059.001 PowerShell sub-technique
- T1069.002 Domain Groups sub-technique
- T1087.001 Local Account sub-technique
- T1087.002 Domain Account sub-technique
- T1560 Archive Collected Data technique
- T1482 Domain Trust Discovery technique
- T1018 Remote System Discovery technique
- T1033 System Owner/User Discovery technique
- T1106 Native API technique
References
- https://www.fox-it.com/media/kadlze5c/201912_report_operation_wocao.pdf FoxIT Wocao December 2019
- https://www.crowdstrike.com/blog/hidden-administrative-accounts-bloodhound-to-the-rescue/ CrowdStrike BloodHound April 2018
- https://github.com/BloodHoundAD/BloodHound GitHub Bloodhound