Expanding Attack Path Management to macOS Environments

This article describes how BloodHound Enterprise now models macOS device management (Jamf) and related integrations (e.g., Okta, GitHub) in its attack graph, arguing that device management platforms introduce high-impact attack primitives — such as permission escalation within the management plane and fleet-wide code execution — which can create hybrid attack paths across identity and device management systems.