SpecterOps Enhances BloodHound for Identity Attack Path Management

SpecterOps has expanded its BloodHound Enterprise tool to include identity attack path mapping for Okta, GitHub, and Mac environments managed through Jamf. This update addresses the increasing number of intrusions that exploit identity relationships rather than endpoints, with identity-based intrusion paths identified in 80% of breaches. The new features include OpenGraph extensions for better visibility of cross-platform attack paths, privilege zones to protect critical assets, and enhanced role-based access controls. These improvements aim to help security teams manage and remediate potential attack paths more effectively. The update also allows customers to manage their own encryption keys, aligning with internal security policies and compliance needs. The new capabilities will be demonstrated at RSAC 2026, highlighting their importance in hybrid environments where multiple platforms are interconnected.

Key Points: • BloodHound Enterprise now supports identity attack path mapping for Okta, GitHub, and Mac. • OpenGraph extensions enhance visibility into cross-platform attack paths. • 80% of breaches involve identity-based intrusion paths, underscoring the need for improved management.