ShareHound: An OpenGraph Collector for Network Shares

This article presents ShareHound, a tool for BloodHound CE/Enterprise that efficiently maps SMB network shares, permissions, and file paths across domains using multithreading, per-host throttling, and a ShareQL filtering language to target crawling. It outlines practical Cypher queries to uncover principals with write or full-control access to shares and to find sensitive artifacts (e.g., VMDK files), shows example CLI usage, and recommends depth-limiting for time-sensitive assessments—supporting rapid identification of attack paths commonly leveraged in ransomware and lateral movement scenarios.