//research · 2026

Silent Ground: Adversarial Collection Suppression Against Attack Path Management

sole author

manuscript in preparation

bloodhound attack graph of a synthetic test domain: users and hosts linked by AdminTo, HasSession and MemberOf edges into Domain Admins
baseline attack graph of a synthetic test domain in bloodhound community edition, before any collection is suppressed.

A study of what happens to attack path management when an adversary controls the collection layer. Tools like BloodHound reason over the data they are given; this work asks how far that data can be quietly degraded before the analysis stops being trustworthy, and whether the tool can tell.

//topics
  • active directory
  • bloodhound
  • adversarial data
  • attack graphs
  • go
upstream fix · BloodHound PR #3161 →
//want to talk about this work?
→ get in touch← all research