Release Notes
2025-04-03 Release Notes (v7.2.1)
Summary
- BloodHound (v7.2.1)
- New and Improved Features
- Added the “Composition” accordion to CoerceandRelayNTLMtoSMB edges to aid defenders in remediation.
- Renamed “Relay Targets” to “Coercion Targets” edge accordion on CoerceandRelayNTLMtoSMB to more accurately describe the contained objects.
- Bug Fixes
- Resolved an issue where “Composition,” “Relay Targets,” or “Coercion Targets” accordions would fail immediately in very large environments.
- Note: CoerceandRelayNTLMtoLDAP and CoerceandRelayNTLMtoLDAPs post-processing was fixed in v7.2.0, apologies for the missed release note.
- Performance improvements on
shortestpath
andallshortestpath
queries in Cypher on PostgreSQL graph database backends. - Updated the
ESC8-Vulnerable Enterprise CA
&DCs vulnerable to NTLM Relay To LDAP Attacks
saved queries to reflect new properties being ingested for the LDAP and ADCS attack paths - Fixed a bug when converting an EnterpriseCA node with an HTTP Enrollment Endpoint.
- New and Improved Features
- SharpHound (v2.6.2)
- New and Improved Features
- Added support for properly filtering NTLM relay edges for members of the Protected Users group.
- Bug Fixes
- SMB Signing requirements will now be reported correctly.
- New and Improved Features
- AzureHound (v2.3.0)
- No new release.
BloodHound (v7.2.1)
New and Improved Features
Bug Fixes
SharpHound (v2.6.2)
New and Improved Features
Bug Fixes
AzureHound (v2.3.0)
No new release.