bhe-bootstrap

Validate BloodHound Enterprise credentials and deployment readiness for red teaming.

11|1|Updated May 4, 2026
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill bhe-bootstrap
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bhe-bootstrap
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/bloodhound-enterprise/skills/bhe-bootstrap
Command: npx skills add https://github.com/dreadnode/capabilities --skill bhe-bootstrap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the manual guesswork and trial-and-error of setting up a BloodHound Enterprise session, ensuring you have valid credentials, a properly provisioned deployment, and the necessary permissions before running any downstream security analysis tasks.

Core Features & Use Cases

  • Multi-Mode Credential Validation: Supports HMAC tokens, JWT login, and pre-existing JWT authentication to accommodate different operator access levels.
  • Deployment Health Checks: Verifies API responsiveness, confirms domain ingestion status, and lists configured asset group tags to identify if the BHE instance is ready for use.
  • Use Case: A red teamer starting a new Active Directory assessment can run this Skill first to confirm their BHE access is working, avoid wasted time on failed tool calls, and get recommendations for next steps based on their deployment's state.

Quick Start

Use the bhe-bootstrap skill to verify your BloodHound Enterprise credentials and confirm your deployment is ready for red teaming operations.

Frequently Asked Questions about bhe-bootstrap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate BloodHound Enterprise credentials before running an analysis?

You can validate BloodHound Enterprise credentials using a bootstrap process that checks API responsiveness, confirms domain ingestion status, and verifies user permissions to prevent failed downstream tool calls.

What authentication methods can I use to set up a BHE session?

You can set up a BHE session using HMAC tokens, JWT login, or pre-existing JWT authentication to accommodate different operator access levels and deployment configurations.

Why do my BloodHound Enterprise API calls keep failing during a red team assessment?

BloodHound Enterprise API calls often fail due to misconfigured credentials, unprovisioned deployments, or restrictive user roles. Running a pre-flight bootstrap session identifies these exact issues before analysis begins.

Can I check if my BloodHound Enterprise deployment has finished ingesting domains?

Yes, you can check domain ingestion status and list configured asset group tags through a deployment health check to ensure your BloodHound Enterprise instance is fully ready for use.

What is the best way to pre-flight check a BloodHound Enterprise deployment for red teaming?

The best way to pre-flight check a BloodHound Enterprise deployment is to run an error-resistant bootstrap process that validates credentials, checks API health, and confirms ingestion status before executing security assessment tasks.