attack-path-triage

What problem does it solve?

BloodHound Enterprise generates high volumes of active attack-path findings across multi-domain Active Directory environments, making it difficult for security teams to quickly identify the highest-risk issues that require immediate remediation, leading to wasted triage time and unaddressed critical vulnerabilities.

Core Features & Use Cases

• Automated Finding Prioritization: Ranks active attack-path findings by severity, principal blast radius, and recency to surface the most impactful issues first.
• Accepted Risk Filtering: Automatically excludes findings marked as accepted risks to avoid redundant triage work, while still providing an auditable list of exempted items.
• Concrete Remediation Guidance: Drills into individual findings to map attack paths and provide specific, actionable remediation steps for each high-priority issue.
• Use Case: A security team managing a 5-domain AD environment with 1,200 active BHE attack-path findings can use this skill to generate a prioritized list of the top 25 most critical issues to address in their next remediation cycle, cutting triage time from hours to minutes.

Quick Start

Use the attack-path-triage skill to generate a ranked list of the highest-priority BloodHound Enterprise attack path findings to remediate first.