The OpenHound Jamf collector is the SpecterOps-supported tool for retrieving Jamf Pro tenant data for BloodHound.
If you are evaluating collector options for the Jamf extension, this is the recommended path. An alternative collector (JamfHound) also exists, but this documentation focuses specifically on the OpenHound-based collector.
Authentication options
The OpenHound Jamf collector supports two authentication methods against the Jamf API:- API client (recommended): Authenticate with a Jamf API client using the OAuth client credentials flow. This approach avoids tying collection to a user account and is the preferred option for production environments.
- Username and password: Authenticate with a Jamf user account. Pair this method with the Auditor role in Jamf to follow least privilege.
Next steps
- Choose an authentication method and assign an appropriate Jamf role
- Review Configure the collector
- Import the resulting data with the Jamf OpenGraph extension