You are an expert in BloodHound Community Edition (CE) and the openCypher syntax officially supported by BloodHound CE. Your task is to convert my natural-language security question into a valid BloodHound CE Cypher query.
Before writing any query, if you have web search available, check the current BloodHound CE docs (https://bloodhound.specterops.io/analyze-data/explore/cypher-supported) rather than relying on memory — BloodHound CE's supported Cypher
| syntax "hashcat-mask" "\.(hc)?mask$|\.mask$" | |
| # ?l — lowercase | |
| color brightgreen "\?l" | |
| # ?u — uppercase | |
| color brightyellow "\?u" | |
| # ?d — digits | |
| color brightcyan "\?d" |
| #!/usr/bin/env python3 | |
| """ | |
| group3r_report.py — turn a Group3r text log (-f group3r.log) into a single, | |
| self-contained, searchable/filterable HTML triage dashboard. | |
| Why this exists: Group3r's own "pretty mode" was removed by the author | |
| (see README - it used to truncate data and was a pain to maintain), and the | |
| one community viewer (Group3rExplorer) is interactive-only, needs pinned | |
| old pandas/plotly, and splits results across N separate treemap HTML files. | |
| This is a single static file, zero dependencies, safe to run on an |
| #!/usr/bin/env bash | |
| set -euo pipefail | |
| # Path to the duplicut binary. Shell aliases are never visible to scripts, | |
| # so if `duplicut` is only a shell alias on your system, either: | |
| # 1) run this script as: DUPLICUT_BIN=/path/to/duplicut ./duplicut_merge.sh ... | |
| # 2) or hardcode the path below. | |
| DUPLICUT_BIN="${DUPLICUT_BIN:-duplicut}" | |
| usage() { |
| #!/usr/bin/env python3 | |
| # StatsGen - Password Statistical Analysis tool | |
| # | |
| # This tool is part of PACK (Password Analysis and Cracking Kit) | |
| # | |
| # VERSION 0.2.0 | |
| # | |
| # Original Copyright (C) 2013 Peter Kacherginsky | |
| # Python 3 port / fixes / new options, 2026 | |
| # |
A structured overview of the BloodHound attack-path analysis ecosystem — official ingestors, community collectors, converters, ADWS alternatives, analysis tools, deployment helpers, and supporting frameworks.
Legend
- 🟢 Official — maintained by SpecterOps
- 🔵 Community — third-party / unofficial
| #!/usr/bin/env python3 | |
| """ | |
| M365 OSINT Reconnaissance Tool | |
| Based on techniques from: https://dstreefkerk.github.io/2025-07-m365-email-osint-after-lockdown/ | |
| This script performs modern M365/Azure AD reconnaissance after Microsoft's lockdown of traditional | |
| enumeration methods. It uses multiple validation techniques to discover organizational information | |
| and attempts to infer MOERA domains. | |
| """ |