Skip to content

Add gMSA Cypher queries for BloodHound CE#49

Open
chryzsh wants to merge 1 commit intoSpecterOps:mainfrom
chryzsh:gmsa-queries
Open

Add gMSA Cypher queries for BloodHound CE#49
chryzsh wants to merge 1 commit intoSpecterOps:mainfrom
chryzsh:gmsa-queries

Conversation

@chryzsh
Copy link
Copy Markdown

@chryzsh chryzsh commented Mar 8, 2026

Add four queries for enumerating and analyzing Group Managed Service Accounts (gMSAs) and ReadGMSAPassword relationships:

  • All gMSAs: List all gMSA accounts
  • All ReadGMSAPassword relationships: Show all ReadGMSAPassword edges
  • Principals with ReadGMSAPassword: Reader and target pairs
  • Effective gMSA password readers through group membership: Nested group traversal

Add four queries for enumerating and analyzing Group Managed Service
Accounts (gMSAs) and ReadGMSAPassword relationships:

- All gMSAs: List all gMSA accounts
- All ReadGMSAPassword relationships: Show all ReadGMSAPassword edges
- Principals with ReadGMSAPassword: Reader and target pairs
- Effective gMSA password readers through group membership: Nested group traversal
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant