tag:github.com,2008:https://github.com/SpecterOps/BloodHoundQueryLibrary/releases 2026-02-17T15:27:47Z tag:github.com,2008:Repository/984398307/queries-2026-02-17 2026-02-17T15:29:16Z github-actions tag:github.com,2008:Repository/984398307/queries-2026-01-21 2026-02-13T23:14:05Z <p>Updated docs pointing to new queries bundle and deleted old Queries.j…</p> <p>…son (<a class="issue-link js-issue-link" href="https://github.com/SpecterOps/BloodHoundQueryLibrary/pull/46">#46</a>)</p> <p>* Updated docs pointing to new queries bundle and deleted old Queries.json</p> github-actions tag:github.com,2008:Repository/984398307/queries-2026-01-05 2026-01-21T09:33:50Z <p>Update README.md with Queries.zip (<a class="issue-link js-issue-link" href="https://github.com/SpecterOps/BloodHoundQueryLibrary/pull/42">#42</a>)</p> <p>* Update README.md with Queries.zip</p> <p>Added Queries.zip info</p> <p>* Update README.md</p> github-actions tag:github.com,2008:Repository/984398307/queries-2026-01-02 2026-01-21T09:33:37Z <p>Update README.md with Queries.zip (<a class="issue-link js-issue-link" href="https://github.com/SpecterOps/BloodHoundQueryLibrary/pull/42">#42</a>)</p> <p>* Update README.md with Queries.zip</p> <p>Added Queries.zip info</p> <p>* Update README.md</p> github-actions tag:github.com,2008:Repository/984398307/queries-2025-12-22 2025-12-22T21:24:27Z <p>Some new queries (<a class="issue-link js-issue-link" href="https://github.com/SpecterOps/BloodHoundQueryLibrary/pull/18">#18</a>)</p> <p>* Create Accounts related to AAD Entra Connect and their sessions.yml</p> <p>* Update and rename Accounts related to AAD Entra Connect and their sessions.yml to Accounts related to AAD Entra Connect.yml</p> <p>* Create Domain Admin to OU mapping .yml</p> <p>* Create Owners of Azure Applications.yml</p> <p>* Create Owners of Azure Subscriptions.yml</p> <p>* Create All Paths to Azure VMs.yml</p> <p>* Update and rename All Paths to Azure VMs.yml to Shortest Paths from Azure Users to Azure VMs.yml</p> <p>* Update Shortest Paths from Azure Users to Azure VMs.yml</p> <p>* Create Shortest Paths from Owned Azure Users to Azure VMs.yml</p> <p>* Create Shortest Paths from Owned Azure Users to Azure Keyvaults.yml</p> <p>* Create Shortest Paths from Azure Users to Azure Keyvaults.yml</p> <p>* Create All direct Controllers of MS Graph</p> <p>* Create All privileged Azure Service Principals.yml</p> <p>* Create All Azure VMs with a tied Managed Identity.yml</p> <p>* Rename All direct Controllers of MS Graph to All direct Controllers of MS Graph.yml</p> <p>* Update Accounts related to AAD Entra Connect.yml</p> <p>Updated to also support Microsoft Entra Cloud Sync</p> <p>* Delete queries/Domain Admin to OU mapping .yml</p> <p>Query is redundant as it is a limited scope (only DA) compared to <a href="https://queries.specterops.io/?input=18a83a17-b451-4343-acfe-7620516e2968&amp;name=Locations+of+Tier+Zero+%2F+High+Value+objects">https://queries.specterops.io/?input=18a83a17-b451-4343-acfe-7620516e2968&amp;name=Locations+of+Tier+Zero+%2F+High+Value+objects</a></p> <p>* Update Shortest Paths from Azure Users to Azure Keyvaults.yml</p> <p>* Update Shortest Paths from Azure Users to Azure VMs.yml</p> <p>* Update Shortest Paths from Owned Azure Users to Azure Keyvaults.yml</p> <p>* Update Shortest Paths from Owned Azure Users to Azure VMs.yml</p> <p>---------</p> <p>Co-authored-by: Martin Sohn Christensen &lt;[email protected]&gt;</p> github-actions tag:github.com,2008:Repository/984398307/latest 2025-06-16T08:58:56Z <p>Merge pull request <a class="issue-link js-issue-link" href="https://github.com/SpecterOps/BloodHoundQueryLibrary/pull/8">#8</a> from SpecterOps/cyphers-and-docs</p> <p>Cyphers and docs</p> martinsohn