Tool - BloodHound

Start the dataserver!

# NOTE: The commands below install legacy BloodHound v4 (neo4j + apt package).
# For current AzureHound v2 compatibility, use BloodHound CE (v5+) via Docker:
#   docker compose up -d  (from the BloodHound CE repo: https://github.com/SpecterOps/BloodHound)
# Legacy v4 install (deprecated):
sudo neo4j console
sudo apt-get install bloodhound

Download azurehound

https://github.com/bloodhoundad/azurehound/releases

2. Run azurehound

Usernames were given. TenantID was retrieved once we login with the given credentials.

az login -u Jose.Rodriguez@megabigtech.com -p Bigt3ch123!                                                                             

[
  {
    "cloudName": "AzureCloud",
    "homeTenantId": "2590ccef-687d-493b-ae8d-441cbab63a72",
    "id": "ceff06cb-e29d-4486-a3ae-eaaec5689f94",
    "isDefault": true,
    "managedByTenants": [],
    "name": "Microsoft Azure Sponsorship",
    "state": "Enabled",
    "tenantDefaultDomain": "megabigtech.com",
    "tenantDisplayName": "Default Directory",
    "tenantId": "2590ccef-687d-493b-ae8d-441cbab63a72",
    "user": {
      "name": "Jose.Rodriguez@megabigtech.com",
      "type": "user"
    }
  }
]


└─$ ./azurehound  -u "Jose.Rodriguez@megabigtech.com" -p 'Bigt3ch123!' list --tenant "2590ccef-687d-493b-ae8d-441cbab63a72" -o output.json  

3. Custom Query

Tool - BloodHound AzureHoundCustomQuery