Active Directory security and BloodHound is a pretty wide topic.
There's a lot of capabilities we didn't discuss today,
and there's some related information that I think will be really
useful to you as you go forward and use these tools.
First of all,
the Cypher query language from Neo4j used by BloodHound is extremely powerful,
and I highly encourage you to check out how it works so
you can write some custom queries.
There's also a REST API for Neo4j which will let you use the data
that BloodHound also uses in an automated fashion.
This could be great for defenders wanting to automate this or
for attackers building more efficient tools.
The BloodHound‑owned script lets you work with the metadata on
these different objects and optimize queries.
Now I highly recommend that you check adsecurity.org if you're an attacker or
a defender. You can learn a lot about protecting or attacking Active Directory
and things like delegation and Kerberoasting,
which obviously relates directly to BloodHound.
But I would also like to point out that Responder is still a tool that
works in a lot of Active Directory environments and that lets you steal so
many credentials that you can then mark as owned in BloodHound to quickly
get a path to where you're going. And talking about Responder, there's a
great red team tools course about Responder on Pluralsight, so you should
also check that out.
Thanks for taking the time to follow this course about BloodHound,
and I hope you really enjoy it.