Ghostwriter icon indicating copy to clipboard operation
Ghostwriter copied to clipboard

BloodHound Finding Collection PoC

Open zinic opened this issue 8 months ago • 0 comments

Issue

No issue logged yet.

Description of the Change

  • Add a BloodHound API client that uses requests and supports BloodHound API Token auth
  • Support listing unified BloodHound Enterprise findings (MVP for supporting Ghostwriter and BlooodHound integration)
  • Optionally fetch finding data when a global BloodHound configuration is present.

Possible Drawbacks

  • No per-project configuration at the moment. I had trouble navigating Django ORM and UI wire-up.
  • A large number of findings may slow down report generation

Verification Process

  • Local integration testing with BloodHound API

Release Notes

  • Add rudimentary BloodHound API integration
  • Allow Ghostwriter to pull in BloodHound Enterprise finding details

zinic avatar Jun 03 '25 22:06 zinic