What’s New in the BloodHound Query Library: BYOL, OpenGraph, Multi-Server, and More

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

TL;DR: The BloodHound Query Library is updated: Bring Your Own Library — import custom query sources & shipping with three OpenGraph extension sources (Jamf, GitHub, Okta), multi-server support, new queries including mappings to PurpleKnight, upcoming deprecation of system_tags conditions, built-in Cypher cheat sheet, and a range of quality-of-life improvements.

The BloodHound Query Library — queries.specterops.io, released in June 2025, is a community-driven collection of Cypher queries that help BloodHound users unlock the full potential of the graph. If you’re new to the project, check out the introductory blog post.

Today we’re releasing an update that makes the library more powerful and more personal. The sections below cover each feature in detail:

New Queries & PurpleKnight Mapping

Deprecation Notice: system_tags Condition

BYOL: Multi-Source Query Loading

Multi-Server Management

Favourites Replace Upvotes/Downvotes

Cypher Cheat Sheet

UI & Navigation

New Queries & PurpleKnight Mapping

This release adds 34 new Active Directory and Azure queries to the library and updated 11 existing queries.

The security assessment mapping now includes Semperis PurpleKnight as a fourth assessment tool, covering 96 of 190 PurpleKnight security indicators (51%). Existing mappings for PingCastle, MDI, and Nessus were also reviewed and updated against the latest versions of those tools.

Updated Mapping Coverage:

Security ToolTotal ControlsMapped ControlsCoveragePingCastle18610556%Purple Knight1909651%MDI453578%Nessus1010100%

Deprecation Notice: system_tags …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen: Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://specterops.io/blog/2026/04/15/whats-new-in-the-bloodhound-query-library-byol-opengraph-multi-server-and-more/
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.