logo

Uncovering network attack paths with runZeroHound

ID: 9e77268e-61af-5c3d-9e74-557a9a56e468

STIX ID: report--9e77268e-61af-5c3d-9e74-557a9a56e468

Feed Name: runZero Blog

Date Published: 2025-10-27

Date Updated: 2026-04-29

Author: HD Moore

...
...

This post introduces runZeroHound, an open source tool that transforms runZero Asset Inventory (JSONL) into BloodHound 8.0 OpenGraph data, enabling graph-based analysis of assets, networks, services, domains, and VLANs. It provides setup instructions for running BloodHound with the PostgreSQL graph driver, steps to generate and import OpenGraph JSON, and example Cypher queries to visualize paths (e.g., internet-to-internal networks), identify exposed systems, and explore network relationships.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.