Introducing the BloodHound Query Library
ID: 01a6b22f-6ff9-5848-b6c1-4f0bb4abb69d
STIX ID: report--01a6b22f-6ff9-5848-b6c1-4f0bb4abb69d
Feed Name: SpecterOps Blog
Date Published: 2025-06-17
Date Updated: 2026-04-30
Author: Martin Sohn Christensen; Joey Dreijer
The BloodHound Query Library is a free, community-driven repository and web interface providing 170+ Cypher queries for BloodHound CE/Enterprise, featuring standardized YAML-based metadata, search and voting, and one-click execution to extend built-in capabilities and help users learn query patterns. It also maps queries to popular AD security assessments—covering 56% of PingCastle tests, 78% of Microsoft Defender for Identity Security Posture Assessment tests, and 100% of Nessus AD Starter checks—and invites community contributions via GitHub to expand and maintain the collection.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
