Operationalizing BloodHound Enterprise: Security automation with Tines
ID: 689a0dc9-fe53-5530-ac60-6eb3d036133f
STIX ID: report--689a0dc9-fe53-5530-ac60-6eb3d036133f
Feed Name: SpecterOps Blog
This blog details how to integrate BloodHound Enterprise with Tines to rapidly assess the blast radius of a potentially compromised Active Directory account, moving from manual checks (Tier Zero status, local admin privileges, and attack paths) to automated Cypher-driven analysis with AI-generated, structured risk summaries. It introduces a ready-to-use Tines story and official BHE modules to enrich alerts, quantify paths to Tier Zero, and feed results into SOC workflows, including a conversational Workbench interface.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
