exposure-trending

What problem does it solve?

Security teams using BloodHound Enterprise struggle to quantify how their Active Directory exposure posture changes over time, and to identify which specific findings or events drove those changes without manually sifting through weeks of historical data.

Core Features & Use Cases

• Exposure Delta Reporting: Calculates the change in overall exposure index, Tier Zero principal count, and critical risk finding count between two user-specified time windows.
• Root Cause Attribution: Identifies which attack path categories improved or regressed, and explains the drivers behind changes (e.g., remediation work, risk acceptance expiration, Tier Zero membership growth, or data ingest failures).
• Use Case: At the close of a remediation sprint, use this skill to generate a concise stakeholder report that proves exactly which risks were fixed and which new risks emerged, instead of manually comparing two separate BHE posture snapshots.

Quick Start

Use the exposure-trending skill to generate a 30-day exposure delta report for your BloodHound Enterprise deployment, highlighting the top movers and root causes for posture changes.