PlumHound Reporting Engine for BloodHoundAD

This blog presents PlumHound, an open-source reporting engine for BloodHoundAD that uses Neo4j Cypher queries to generate actionable HTML/CSV reports aiding Blue Teams in identifying and remediating Active Directory control path weaknesses. It covers setup and execution via task lists (69+ default reports), showcases categories such as delegation, Kerberoastable users, local administrators, GPO ownership, user sessions, and password hygiene, and includes single-query mode for ad-hoc analysis. The post also details the BlueHound modules AnalyzePath (to identify which relationships to break) and BusiestPath (to prioritize remediation by user impact), along with verbosity features and links to documentation and the GitHub repository.