Know Your Adversary | 10-Year BloodHound Anniversary Pt. 2 (Ep. 14)
Source: YouTube · SpecterOps · published Aug 17, 2026 · 45:05
The evolution of Blood Hound from a red team tool to Blood Hound Enterprise was driven by the need to operationalize attack path data for defenders, addressing the scalability and complexity challenges of securing dynamic hybrid environments.
Key Takeaways:
• The shift toward defensive methodology began with the realization that while attackers only need to be right once, defenders must be right all the time, requiring operationalization beyond simple enumeration 4:01.
• Early consulting attempts revealed that enumerating all attack paths is impossible; the focus shifted instead to identifying high-risk paths through tiered administration and least privilege principles 6:56.
• A key insight was "localized intelligence," where context determines risk — an admin logging into a server carries vastly different risk depending on that server's inbound exposure and role 15:00.
• The move to Azure exposed the dangers of hybrid complexity, such as syncing tier-zero accounts to the cloud, which created hidden attack paths that traditional siloed tools missed 31:33.
• Scaling to enterprise environments exposed the limits of naive data collection, requiring robust engineering to handle massive scale and configuration diversity across platforms like GitHub and AWS 37:44.
• Open Graph was developed to extend the tool beyond Active Directory, allowing users to model custom access control systems like GitHub without hard-coded schema changes 36:33.
Blood Hound Enterprise now serves as a continuous, scalable solution for visualizing and remediating risk across complex hybrid identities, with AI-native views on the horizon.
Sources:
- 4:01 Discussion on the "defender's dilemma" and the asymmetry of attack vs. defense.
- 6:56 Explanation of why enumerating all attack paths is infeasible.
- 15:00 Definition of "localized intelligence" and context-dependent risk.
- 31:33 Risks of syncing tier-zero accounts in hybrid Azure environments.
- 37:44 Challenges of scaling data collection in massive enterprise environments.
- 36:33 Introduction of Open Graph as an extensible framework for non-AD platforms.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] [music] Welcome back to the Know Your Adversary podcast. I'm Jared Atinson and my co-host Justin Kohler. We're joined again, if you listen to the previous episode, uh by Andy Robbins, Rohan Berserker, and Will Schroeder. Those are the the creators of Blood Hound. Um, and in the previous previous podcast episode, we uh talked about kind of like the origin of Blood Hound, where the idea came from. Uh, kind of a lot of fun stories about the history and kind of like the different challenges that that they uh sought to overcome. And we ended up running out of time. So then we realized that if we want to talk about kind of uh continue talking about how it evolved into, for instance, Blood Hound Enterprise and where it's going to go in the future, how we kind of all see that as a as a col…