chophound
Some scripts to support with importing large datasets into BloodHound (by bitsadmin)
ADExplorerSnapshot.py
ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON. (by c3c)
| chophound | ADExplorerSnapshot.py | |
|---|---|---|
| 2 | 1 | |
| 70 | 807 | |
| - | - | |
| 3.0 | 5.6 | |
| 6 months ago | 7 days ago | |
| Python | Python | |
| BSD 3-clause "New" or "Revised" License | - |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
chophound
Posts with mentions or reviews of chophound.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-12-06.
-
Dealing with large BloodHound datasets
Because the PowerShell script was just a quick PoC and in my experience Python has many useful libraries available, I started writing a new Python script. The chophound.ps1 PowerShell script is available in the GitHub repository at https://github.com/bitsadmin/chophound/.
- chophound: Some scripts to support with importing large datasets into BloodHound
ADExplorerSnapshot.py
Posts with mentions or reviews of ADExplorerSnapshot.py.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-12-06.
-
Dealing with large BloodHound datasets
Tool Language Url Notes SharpHound .NET 4 executable https://github.com/BloodHoundAD/SharpHound/ Also possible to be executed in-memory using Cobalt Strike, check @william_knows’ blog post AzureHound PowerShell https://github.com/BloodHoundAD/AzureHound/ Specifically for Azure environments, outside of the scope of this article SharpHound.ps1 PowerShell https://github.com/BloodHoundAD/BloodHound/ Available from the Collectors folder. Using PowerShell reflectively loads the embedded SharpHound.exe .NET executable. It exposes the Invoke-BloodHound function which calls the main function of the SharpHound binary. SharpHound.py Python https://github.com/fox-it/BloodHound.py/ Python version of SharpHound ADExplorerSnapshot.py Python https://github.com/c3c/ADExplorerSnapshot.py/ Convert Sysinternals ADExplorer snapshots to BloodHound-compatible JSON files. BOFHound Python https://github.com/fortalice/bofhound/ Generate BloodHound compatible JSON from logs written by ldapsearch BOF and pyldapsearch.
What are some alternatives?
When comparing chophound and ADExplorerSnapshot.py you can also consider the following projects:
RustHound - Active Directory data collector for BloodHound written in Rust. 🦀
SharpHound - C# Data Collector for BloodHound
docker-bloodhound - BloodHound Docker Ready to Use
ansible-ad-inventory - Ansible Active Directory Inventory script
GoodHound - Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
Max - Maximizing BloodHound. Max is a good boy.