SharpHound v2 is officially generally available. If you have not already done so, please make sure you upgrade your SharpHound collectors to v2.1+. SharpHound v1 will officially be end-of-life on May 1, 2023.NOTE: Upgrading to SharpHound v2+ must occur concurrently on all services and requires enabling the “Enable post processing of local groups” early access feature simultaneously.Instructions to upgrade your collector may be found here. Our Customer Success team will begin reaching out to all customers still running SharpHound v1 and would be happy to help if you require it.
Join us Tuesday, 2/28 at 1 PM ET for our next webinar, A Taste of Kerberos Abuse, presented by Elad Shamir. You’ll get a taste of our Adversary Tactics: Red Team Operations training, with highlights from the Kerberos modules covering every step of the Kerberos authentication flow.Sign up here: https://ghst.ly/3X4leNV
Entity Panels for AD objects have undergone restructuring and should load significantly faster now! Previously, each panel would load all data elements at once; this meant that a big query like “Outbound Control” could take a long time and prevent you from seeing data. These now load separately and will allow you to view available data faster - way faster. Note, very large / complex environments may still hit constraints pulling information back from specific queries within the panel but this will no longer prevent the rest of the panel from loading. Future work is planned in this area to provide partial results where applicable.
Explore node searches will also return much faster due to query optimizations and post-processing improvements.
Note: Azure Entity Panels are undergoing the same improvements and will be available soon!
Bug Fixes
Cleaned up logging in AzureHound related to stalled data collection jobs
Cleaned up where API responses included skip, limit, and count where they were not in use
Minimum version of SharpHound Service to support all current functionality: v2.1.1
Bug Fixes
Fixed a bug which prevented SharpHound Enterprise from creating WriteAccountRestrictions edges
Fixed a bug that prevented domains from being marked as collected during cross domain trust collections
NOTE: Upgrading to SharpHound v2+ must occur concurrently on all services and requires enabling the “User Rights Assignment Collection” experimental feature at the same time. Please contact your TAM or respond to this email for assistance.