The Attack Path Management data collector for Microsoft Azure -AzureHound collects data from Azure Active Directory (AzureAD) and Azure Resource Manager (AzureRM). It can then send this data to Attack Path Management, maybe BloodHound Enterprise for processing and analysis. +AzureHoundAD collects data from Azure Active Directory (AzureAD) and Azure Resource Manager (AzureRM). It can then send this data to Attack Path Management, maybe BloodHound Enterprise for processing and analysis. +
-AzureHound uses the Microsoft Graph and Azure REST APIs to collect data. It can run on any operating system and doesn't require any external dependencies. Authentication Attack with AzureHound supports several authentication flows, including username or password, JWT, refresh token, service principal secret, and service principal certificate. +AzureHoundAD uses the `Microsoft` Graph and Azure REST APIs to collect data. It can run on any operating system and doesn't require any external dependencies. Authentication Attack with AzureHoundAD supports several `Authentication` flows, including username or password, JWT, refresh token, service principal secret, and service principal certificate. - AzureHound is a Go binary that collects data from AzureAD and AzureRM via the MS Graph and Azure REST APIs. # Get AzureHoundAD + + Download the appropriate binary for your platform from one of our [Releases](https://github.com/byt3n33dl3/AzureHoundAD/releases). The rolling release contains pre-built binaries that are automatically kept up-to-date with the `main` branch and can be downloaded from diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..b397bb6 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,9 @@ +# Reports + +```sh +DO NOT CREATE AN ISSUE +``` + +To report a security problem. Instead, please send an email to [byt3n33dl3@pm.me](mailto:byt3n33dl3@proton.me) + +We will acknowledge it within maximum 3 working days, `if` it's Important.