logo

Operationalizing BloodHound Enterprise: Security automation with Tines

ID: 689a0dc9-fe53-5530-ac60-6eb3d036133f

STIX ID: report--689a0dc9-fe53-5530-ac60-6eb3d036133f

Feed Name: SpecterOps Blog

Date Published: 2025-12-09

Date Updated: 2026-04-30

Author: Hugo Van Den Toorn; Joey Dreijer

...
...

This blog details how to integrate BloodHound Enterprise with Tines to rapidly assess the blast radius of a potentially compromised Active Directory account, moving from manual checks (Tier Zero status, local admin privileges, and attack paths) to automated Cypher-driven analysis with AI-generated, structured risk summaries. It introduces a ready-to-use Tines story and official BHE modules to enrich alerts, quantify paths to Tier Zero, and feed results into SOC workflows, including a conversational Workbench interface.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.