BloodHound

BloodHound is used to find relationships within an Active Directory (AD) domain to discover attack paths.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the BloodHound server.

2. Username and Password (optional) - The credentials for a user account that has the permissions to fetch assets.

   Note:

   When Token Key and Token ID are not supplied, User Name and Password are required.

3. Token Key and Token ID (optional) - The API Tokens associated with a user account that has permissions to fetch assets. For information on how to create a Token Key/ID pair, see Working with the BloodHound API.

   Note:

   When User Name and Password are not supplied, Token Key and Token ID are required.

4. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

5. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

6. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

7. HTTPS Proxy Password (optional) - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

APIs

Axonius uses the BloodHound API (v2).

Supported From Version

Supported from Axonius version 4.6