BloodHound Enterprise Description
The problem of managing attack paths requires a unique, fundamentally different methodology that helps organizations understand, empirically quantify the impact and eliminate identity-based attacks path risks. Enterprise networks, user permissions, application permissions and security group memberships can be dynamic. Consider that every time a privileged system user logs in, they leave behind tokens or credentials that adversaries can use. The attack paths must be constantly mapped because the connections and behaviors which form the attack paths are constantly changing. The haphazard removal of AD misconfigurations provides zero security posture improvements and negatively impacts team productivity. If you can empirically identify specific misconfigurations which allow you to eliminate a large number of attack pathways, you can generate meaningful improvements in security posture and increase the productivity of your team.