ProfileHound: Post-Escalation Tool Designed to Achieve Red Team Objectives
ID: f3e9157f-b05b-5151-84ba-81e98702fa12
STIX ID: report--f3e9157f-b05b-5151-84ba-81e98702fa12
Feed Name: GBHackers
ProfileHound is a post-exploitation tool for Active Directory environments that enumerates domain user profiles from the C$ share, extracts SIDs and NTUSER.DAT timestamps, and integrates with BloodHound via a new HasUserProfile edge to identify high-value machines and dormant profiles likely to contain credentials or secrets; it supports multiple deployment methods, provides statistical reporting and pre-built queries, and is in early development with planned integrations like SCCMHunter and Azure AD device correlation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
