Know Your Adversary | The State of APM: Graph Expansion (Ep. 5)
Source: YouTube · SpecterOps · published Oct 27, 2025 · 18:12
The SpecterOps team discusses their ongoing efforts to evolve the BloodHound graph by adding new platforms, edges, and tradecraft to better mirror real-world adversary attack surfaces 0:17-0:50.
Key Takeaways:
• Alaj Shamir, Head of Research at SpecterOps, highlights the team's progress on the BloodHound graph over the past year and outlines future expansion goals 0:14-0:27.
• A primary focus is expanding the graph with new platforms, edges, and tradecraft to give customers better visibility into how adversaries operate 0:29-0:34.
• Using the principle "the map is not the territory," Shamir explains that their goal is to make BloodHound's map closely reflect the actual territory—the true attack surface adversaries exploit—while filtering out irrelevant noise 0:36-0:50.
This continuous refinement ensures defenders have an actionable and highly accurate representation of their true attack surface.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Welcome back to the Know Your Adversary podcast. Today we're joined by Alaj Shamir, our head of research here at Spectre Ops, and we're going to talk about kind of the Blood Hound graph and some of the work that we put in over the past year and maybe look forward a little bit into what we're going to be doing over uh the upcoming year and how we're expanding the graph. So, how are we adding new platforms, new edges, new uh new tradecraftraft into the graph so that customers have I I like to say this, the map is not the territory. And the idea is is the territory is the actual attack surface that that adversaries are taking advantage of. The map is our representation of that. And we want to try to get our our map to be as close to the actual territory as possible while maybe ignoring some t…