Creators of BloodHound | Experts in Adversary Tradecraft | Leaders in Identity Attack Path Management
Joined January 2017
- Tweets4.2K
- Following406
- Followers42.7K
- Likes2.3K
Pinned Tweet
The #SOCON2027 Call for Presentations is open! 🙌
Discovered, built, broken, or defended something in identity security or Attack Paths? We want to hear about it.
Submit a 25- or 50-minute session proposal by November 13: ghst.ly/4scIMRS
Our #SOCON2027 CFP closes this week! Have research or practical lessons on identity security, adversary tradecraft, or attack paths? We want to hear them.
Submit 👉 ghst.ly/4dGrZAx
ALT Certainly! Here's an alternative text description: "Person speaking at a podium during the SpecterOps SO-CON 2026 event, with a microphone and laptop. SO-CON logos displayed on the backdrop. Attendees are seated in the foreground.
101
On #VeteransDay we recognize all who served, including those we have the privilege of working alongside.
Thank you for your service and sacrifice.
ALT The text reads, "Thank you, Veterans" with a subtitle, "Honoring all who served," against a dark blue background with three stars below.
Meet Sage: open-source AI for assumed-breach operations, built into Mythic. State your objective; Sage prepares commands for your approval in supervised mode.
@Ne0nd0g breaks it down in his new blog ⤵️ ghst.ly/4AnlQC4
What happens in the gaps between your security tools?
Join @Ne0nd0g, @robwinchester3 and @OpenAI's Jack Lockhart & Hunter Reh as they explore frontier AI, security testing, and attack path validation.
📆 November 18 | Noon ET / 9 AM PT
Register: ghst.ly/4Absew9
ALT Webinar announcement with logos of SpecterOps and OpenAI. Title: "Controlling Gaps & Validating Attack Paths: Innovations in Security Testing and Vulnerability Research." Scheduled for Wednesday, November 18 at 12pm ET / 9am PT.
5
1,146
What happens when an everyday app becomes a SOCKS proxy?
@skylerknecht joins @ScoubiMtl for another installment of SO:Brief to discuss how attackers use apps to route traffic through enterprise networks.
Give it a watch! 👀
Your next move changes when defenders respond.
Practise adapting your tradecraft against live defenders in our Red Team Operations training at #BHEU.
Join our team December 7 through 10 in London: ghst.ly/4AQLIHs
1
12
1,598
Happy #BloodHoundBasics courtesy of @_wald0!
Struggling with cypher? We can help! We have several resources available including:
Docs: ghst.ly/4t4UKxr
Blogs: ghst.ly/4j2Kjqv
Or hop into the Slack/Discord, we are happy to help.
A vendor holds credentials. A service principal holds permissions in your tenant.
For multi-tenant apps, a compromised cred can expose multiple customer environments.
Read more on app registrations, service principals & consent connect from @rbnroot ⤵️ ghst.ly/4jVEjkl
“That template controls that agent. Somebody else is in control of that template.”
@Icemoonhsv and @elad_shamir explain why an agent’s blueprint matters when evaluating who controls its access.
Check out #KnowYourAdversary: ghst.ly/4eTDKnB
3
6
1,452
We’re expanding our @OpenAI partnership to help enterprise security teams apply OpenAI GPT Cyber Models to authorized security testing.
Our AI red team assessments & enablement services combine frontier cyber models with adversary tradecraft. Learn more: ghst.ly/4BLymgb
See this approach in practice during our November 18 webinar with experts from SpecterOps and OpenAI. Save your spot: ghst.ly/4Absew9
2
612
A few days left to vote! 🗳️
BloodHound v8.0 with OpenGraph is nominated for Innovation of the Year (Open Source Product or Tool) in the @SANSInstitute Difference Makers Awards.
Cast your vote by Monday, November 9: ghst.ly/4zyjNLL
Without CHAP authentication, attackers can impersonate an authorized iSCSI initiator and access shared virtual disks, bypassing NTFS permissions.
@unsigned_sh0rt shows how the attack path works and what defenders can do: ghst.ly/4fd334e
Joining us at #BHEU? Take your skills further with our Red Team Operations training in London.
Learn more and register: ghst.ly/4AQLIHs
“The strategy that you choose to take starts with understanding what you have.”
In our recent #KnowYourAdversary @JustinKohler10 explains how BloodHound reveals Attack Paths and OpenGraph expands visibility across platforms.
👀: ghst.ly/4ipZ8mF
1
1,279
There’s still time to submit a talk for #SOCON2027.
Have an idea about Attack Paths, identity security, OpenGraph, or agentic AI? Send us your proposal by November 13.
Submit your idea 👉 ghst.ly/4dGrZAx
1
1,485
Happy #BloodHoundBasics courtesy of Jacob Jackson!
New in BloodHound Enterprise: Findings Prioritization (Early Access).
Go beyond severity ratings with risk-based rankings to focus remediation where it matters most. ghst.ly/4yLaBlK
Results are in... Congrats to @stuk0v_ winner of our OpenGraph Halloween Art Competition! 🎃
Check out Mat’s winning design below & join us in giving him a round of applause.
Thanks to everyone who submitted a design & brought some Halloween spirit to the BloodHound community!
“Right now we're targeting least privilege.”
@Icemoonhsv and @elad_shamir discuss the permissions needed to enumerate agents and how automating setup makes deployment easier.
Check out #KnowYourAdversary: ghst.ly/4eTDKnB
1
2
1,443
BloodHound v8.0 with OpenGraph is a finalist for Innovation of the Year (Open Source Product or Tool) in the 2026 @SANSInstitute Difference Makers Awards!
BloodHound community, we’d love your vote. Voting closes November 9: ghst.ly/4knB45j
#SANSDMA
