AzureHound

AzureHound is a powerful tool for gathering and analyzing information about Azure Active Directory environments. It helps identify security risks and potential attack paths by collecting data on various Azure entities such as users, groups, roles, and their relationships. To get started with AzureHound, you'll need appropriate permissions to access Azure AD resources and the ability to run the tool in your environment.

Key Features of AzureHound

  • Data Collection: Gathers comprehensive information about Azure AD objects and their connections.

  • Visualization: Integrates with BloodHound for graphical representation of data, making it easier to identify attack paths.

  • Risk Identification: Highlights potential vulnerabilities within Azure environments.

  • Extensibility: Supports custom queries and extensions to tailor data analysis to specific needs.

Running AzureHound

Using refresh_token

./azurehound -r "0.ARwA6Wg..." list --tenant "contoso.onmicrosoft.com" -o output.json

Last updated