Justin Kohler
Posts By SpecterOps Team Members - Medium

Unwrapping BloodHound v6.3 with Impact Analysis

Unwrapping BloodHound v6.3 with Impact Analysis

| | Active Directory, attack-path-management, azure, BloodHound, identity security
Just in time for the holidays, sharper tools for faster defenseToday, the SpecterOps team rolled out a number of new features, product enhancements, and recommendations intended to help users of BloodHound Enterprise and BloodHound Community Edition more easily visualize attack paths and show improvements in identity risk reduction over time. Scroll ... Read More
Posts By SpecterOps Team Members - Medium
Hybrid Attack Paths, New Views and your favorite dog learns an old trick

Hybrid Attack Paths, New Views and your favorite dog learns an old trick

| | Active Directory, attack-path-management, azure, BloodHound, bloodhound-enterprise
Introducing Hybrid Attack PathsDeath from Above: An Attack Path from Azure to Active Directory With BloodHoundWhen we introduced Azure Attack Paths into BloodHound, they were added as a completely separate sub-graph. At no point did Active Directory (AD) and Azure connect within a BloodHound dataset. Ever since adding Azure (honestly, even ... Read More
Posts By SpecterOps Team Members - Medium
Final Steps to BloodHound Federal — FedRAMP High Compliance

Final Steps to BloodHound Federal — FedRAMP High Compliance

| | Active Directory, attack-path-management, azure, BloodHound, bloodhound-enterprise
Final Steps to BloodHound Federal — FedRAMP High ComplianceEver since SpecterOps first launched BloodHound Enterprise (BHE) in July 2021, one of our team’s biggest frustrations involved a lack of FedRAMP qualifications, which prevented us from supporting a large set of desired users; specifically in the federal space. This is why I am ... Read More
Posts By SpecterOps Team Members - Medium
Attack Path Management Pillars: Part 3 — Safe AD Security Remediation Guidance

Attack Path Management Pillars: Part 3 — Safe AD Security Remediation Guidance

| | Active Directory, active directory security, attack-path-management, BloodHound, bloodhound-enterprise
Attack Path Management Pillars: Part 3 —Practical AD Security Remediation GuidanceHistorically, Identity Attack Paths are a double edge sword; remediation efforts can easily break production applications or create more Attack Paths. Unfortunately, fixing the problem can pose just as much risk to the organization (as the adversaries’ abuse of the ... Read More
Posts By SpecterOps Team Members - Medium
3 Foundational Pillars for Attack Path Management: Pillar 2 — Empirical Impact Assessment

3 Foundational Pillars for Attack Path Management: Pillar 2 — Empirical Impact Assessment

| | Active Directory, active directory security, attack-path-management, BloodHound, bloodhound-enterprise
3 Foundational Pillars for Attack Path Management: Pillar 2 — Empirical Impact AssessmentAttack Paths are the chains of abusable privileges and user behaviors that create direct and indirect connections between Active Directory Users and Computers. The unintended consequence of these misconfigurations enables low-privilege users to reach high-value targets and are used by ... Read More
Posts By SpecterOps Team Members - Medium
3 Foundational Pillars for Attack Path Management: Pillar 1 — Continuous & Comprehensive Mapping

3 Foundational Pillars for Attack Path Management: Pillar 1 — Continuous & Comprehensive Mapping

| | Active Directory, active directory security, attack-path-management, BloodHound, bloodhound-enterprise
3 Foundational Pillars for Attack Path Management: Pillar 1 — Continuous & Comprehensive MappingWhen we coined the term “Attack Path Management” (APM) in our post ‘The Attack Path Manifesto’ in May of 2021, we set out to bring awareness to the most prevalent tactic used by adversaries to accomplish their mission. But ... Read More
Posts By SpecterOps Team Members - Medium
Active Directory Attack Paths — “Is everyone this bad?”

Active Directory Attack Paths — “Is everyone this bad?”

| | Active Directory, active directory security, attack-path-management, BloodHound, bloodhound-enterprise
Active Directory Attack Paths — “Is it always this bad?”We launched BloodHound Enterprise to help organizations manage Attack Paths in Active Directory (AD) a little more than three months ago. Since then, we’ve deployed into many environments and we run into some form of the same question every time, “so tell us, is ... Read More
Posts By SpecterOps Team Members - Medium