Skip to content

Add advanced AD security detection features via TDD#6

Merged
DotNetRussell merged 1 commit intomainfrom
features/adding-new-detection-patterns
Feb 9, 2026
Merged

Add advanced AD security detection features via TDD#6
DotNetRussell merged 1 commit intomainfrom
features/adding-new-detection-patterns

Conversation

@DotNetRussell
Copy link
Copy Markdown
Owner

  • Implement Shadow Credentials detection for users with KeyCredentialLink
  • Add GPO content parsing to identify exploitable settings (e.g., Scheduled Tasks)
  • Introduce Constrained Delegation detection for computers with delegation configs
  • Add LAPS status detection to check for Local Administrator Password Solution
  • Extend severity scoring and CLI args for new features
  • Add YAML export support for reports
  • Include abuse suggestion panels with mitigation advice for each new feature
  • Add 8 comprehensive unit tests (totaling 50) and corresponding test data
  • Update README and requirements.txt to reflect changes

Features implemented following Red-Green-Blue TDD, enhancing BloodBash's AD attack path analysis capabilities.

- Implement Shadow Credentials detection for users with KeyCredentialLink
- Add GPO content parsing to identify exploitable settings (e.g., Scheduled Tasks)
- Introduce Constrained Delegation detection for computers with delegation configs
- Add LAPS status detection to check for Local Administrator Password Solution
- Extend severity scoring and CLI args for new features
- Add YAML export support for reports
- Include abuse suggestion panels with mitigation advice for each new feature
- Add 8 comprehensive unit tests (totaling 50) and corresponding test data
- Update README and requirements.txt to reflect changes

Features implemented following Red-Green-Blue TDD, enhancing BloodBash's AD attack path analysis capabilities.
@DotNetRussell DotNetRussell merged commit a2bee13 into main Feb 9, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant