logo

ProfileHound: Post-Escalation Tool Designed to Achieve Red Team Objectives

ID: f3e9157f-b05b-5151-84ba-81e98702fa12

STIX ID: report--f3e9157f-b05b-5151-84ba-81e98702fa12

Feed Name: GBHackers

Date Published: 2026-01-05

Date Updated: 2026-04-22

Author: Divya

...
...

ProfileHound is a post-exploitation tool for Active Directory environments that enumerates domain user profiles from the C$ share, extracts SIDs and NTUSER.DAT timestamps, and integrates with BloodHound via a new HasUserProfile edge to identify high-value machines and dormant profiles likely to contain credentials or secrets; it supports multiple deployment methods, provides statistical reporting and pre-built queries, and is in early development with planned integrations like SCCMHunter and Azure AD device correlation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.