[rwth-security] ADCS Attack Paths in BloodHound

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"ADCS Attack Paths in BloodHound" (Teil 1)

Infos zu

BloodHound [1]

"... uses graph theory to reveal the hidden and often unintended relationships within an Active Directory or Azure environment. ... Defenders can use BloodHound to identify and eliminate those same attack paths ..."

bzw. FalconHound [2]

"... allows you to utilize and enhance the power of BloodHound in a more automated fashion ... designed to be used in conjunction with a SIEM or other log aggregation tool ..."

VG

Bernd

[0] https://posts.specterops.io/adcs-attack-paths-in-bloodhound-part-1-799f3d3b0...

[1] https://github.com/BloodHoundAD/BloodHound

[2] https://github.com/FalconForceTeam/FalconHound