BloodHound requires collected data to be in in a specific JSON format, which is documented in this article.
The collectors for BloodHound Enterprise (BHE) and BloodHound Community Edition (BHCE) will format the collected data correctly. Enterprise collectors run continuously and automatically upload the data to the API endpoint /ingest
, whereas Community Edition collectors drop the JSON data to disk which then has to be uploaded manually to BloodHound via Administration → File Ingest, or to the API endpoint /file-upload
.
Users of BloodHound Enterprise can also manually upload JSON data collected from Community Edition collectors.
Users of both BHE and BHCE may also create their own JSON files and upload them to BloodHound.
The JSON format contains two main objects**:**
-data -An array of collected objects. One JSON file contains only one type of object, for example computers.
data
array.CollectionMethods
.DataType
.data
object array.JSON data of each node type will vary greatly. Examples of detailed JSON formats for some node types can be found in the latest version directory in the BHCE’s repository.
BloodHound requires collected data to be in in a specific JSON format, which is documented in this article.
The collectors for BloodHound Enterprise (BHE) and BloodHound Community Edition (BHCE) will format the collected data correctly. Enterprise collectors run continuously and automatically upload the data to the API endpoint /ingest
, whereas Community Edition collectors drop the JSON data to disk which then has to be uploaded manually to BloodHound via Administration → File Ingest, or to the API endpoint /file-upload
.
Users of BloodHound Enterprise can also manually upload JSON data collected from Community Edition collectors.
Users of both BHE and BHCE may also create their own JSON files and upload them to BloodHound.
The JSON format contains two main objects**:**
-data -An array of collected objects. One JSON file contains only one type of object, for example computers.
data
array.CollectionMethods
.DataType
.data
object array.JSON data of each node type will vary greatly. Examples of detailed JSON formats for some node types can be found in the latest version directory in the BHCE’s repository.