# Standards and References - BloodHound CE Reconnaissance

## MITRE ATT&CK References

| Technique ID | Name | Tactic |
|-------------|------|--------|
| T1087.002 | Account Discovery: Domain Account | Discovery |
| T1069.002 | Permission Groups Discovery: Domain Groups | Discovery |
| T1482 | Domain Trust Discovery | Discovery |
| T1615 | Group Policy Discovery | Discovery |
| T1018 | Remote System Discovery | Discovery |
| T1033 | System Owner/User Discovery | Discovery |
| T1016 | System Network Configuration Discovery | Discovery |

## Official Resources

- BloodHound CE: https://github.com/SpecterOps/BloodHound
- SharpHound: https://github.com/BloodHoundAD/SharpHound
- BloodHound.py: https://github.com/dirkjanm/BloodHound.py
- BloodHound Query Library: https://queries.specterops.io/
- AzureHound: https://github.com/BloodHoundAD/AzureHound

## Key Research

- SpecterOps: An Ace in the Hole - Stealthy Data Collection with BloodHound
- Compass Security: BloodHound Community Edition Custom Queries (2025)
- SpecterOps: Introducing the BloodHound Query Library (2025)
