https://specterops.io/blog/2019/07/30/introducing-ghostwriter/
Introducing Ghostwriter - SpecterOps
introducingghostwriterspecterops
https://bloodhound.specterops.io/openhound/collectors/github/configure-pat
Configure a Personal Access Token - SpecterOps
Create a Fine-grained Personal Access Token for GitHub data collection.
personal access tokenconfigurespecterops
https://develop.cyberscoop.com/kevin-mandia-specterops-board-of-directors-david-mcguire-identity-attacks/
Kevin Mandia joins SpecterOps as chair of the board
Oct 1, 2024 - Kevin Mandia has joined the board of SpecterOps, a Virginia-based startup focused on attack path management.
kevinmandiajoinsspecteropschair
https://specterops.io/news/announcing-2019-q2-public-training-schedule/
Announcing 2019 Q2 Public Training Schedule - SpecterOps
Dec 12, 2023 - Check out SpecterOps Adversary Tactics courses, dates and locations. We announce more courses throughout the year, so check back regularly.
public training scheduleannouncingspecterops
https://docs.specterops.io/mythic-docs/operational-pieces/browser-scripts
Browser Scripts - SpecterOps Open Source
browserscriptsspecteropsopensource
https://docs.specterops.io/mythic-docs/customizing/hooking-features
Overview - SpecterOps Open Source
overviewspecteropsopensource
https://careers.ballisticventures.com/companies/specterops/jobs/74464803-technical-account-manager
Technical Account Manager @ SpecterOps | Ballistic Ventures Job Board
Search job openings across the Ballistic Ventures network.
technical account managerballistic venturesspecteropsjobboard
https://docs.specterops.io/ghostpack-docs/SharpDPAPI-mdx/overview
SharpDPAPI Overview - SpecterOps Open Source
C# port of DPAPI functionality for credential extraction and decryption
sharpdpapioverviewspecteropsopensource
https://docs.specterops.io/mythic-agents/apollo-docs/documentation-payload/apollo/commands/spawnto_x64
spawnto_x64 - SpecterOps Open Source
Converted from Markdown to MDX
specteropsopensource
https://docs.specterops.io/mythic-agents/apfell-docs/commands/load
load - SpecterOps Open Source
This loads new functions into memory via the C2 channel
loadspecteropsopensource
https://bloodhound.specterops.io/opengraph/extensions/github/edges/gh_createtag
GH_CreateTag - SpecterOps
[Repository] Repo role can create tags and releases
ghspecterops
https://bloodhound.specterops.io/reference/attack-paths/list-finding-trends
List finding trends - SpecterOps
Lists findings and their changes in between two dates for an environment
listfindingtrendsspecterops
https://docs.specterops.io/misconfiguration-manager-docs/defense-techniques/DETECT/DETECT-7/detect-7_description
DETECT-7 - SpecterOps Open Source
Monitor read access to the SMSTemp directory
detectspecteropsopensource
https://specterops.io/events/?event_type%5B%5D=training-offering
Events - SpecterOps
May 7, 2026 - See our upcoming events focused on Training, Tradecraft, and more!
eventsspecterops
https://specterops.io/blog/2024/01/30/bofhound-session-integration/?source=rss----f05f8696e3cc---4
BOFHound: Session Integration - SpecterOps
Mar 24, 2025 - In this post, we examine BOFHound-compatible BOFs and usage examples that allow an operator to take a manual and targeted approach to attack path mapping.
sessionintegrationspecterops
https://bloodhound.specterops.io/reference/ous/get-ou-entity-info
Get OU entity info - SpecterOps
Get info and counts for this OU node.
getouentityinfospecterops
https://specterops.io/blog/2017/06/12/serving-random-payloads-with-apache-mod_rewrite/
Serving Random Payloads with Apache mod_rewrite - SpecterOps
mod rewriteservingrandompayloadsapache
https://bloodhound.specterops.io/opengraph/extensions/okta/edges/okta_inboundorgsso
Okta_InboundOrgSSO - SpecterOps
Single sign-on from an external organization into Okta
oktaspecterops
https://docs.specterops.io/misconfiguration-manager-docs/attack-techniques/CRED/CRED-6/cred-6_description
CRED-6 - SpecterOps Open Source
Loot domain credentials, SSH keys, and more from SCCM Distribution Points (DP)
credspecteropsopensource
https://docs.specterops.io/mythic-docs/internal-documentation
Internal Documentation - SpecterOps Open Source
Internal documentation docker container
internal documentationspecteropsopensource
https://specterops.io/blog/author/joshua-prager/
joshua prager, Author at SpecterOps
joshuapragerauthorspecterops
https://bloodhound.specterops.io/opengraph/extensions/okta/edges/okta_helpdeskadmin
Okta_HelpDeskAdmin - SpecterOps
Help desk administrator role assignment
oktaspecterops
https://docs.specterops.io/sharpsccm-docs/commands/get/class-instances
get class-instances - SpecterOps Open Source
Query specific WMI class instances
getclassinstancesspecteropsopen
https://specterops.io/bloodhoundscentry/
BloodHound Scentry - SpecterOps
May 5, 2026 - Expertise to accelerate your Attack Path Management practice with BloodHound Scentry.
bloodhound scentryspecterops
https://bloodhound.specterops.io/opengraph/extensions/github/edges/gh_managediscussionbadges
GH_ManageDiscussionBadges - SpecterOps
[Repository] Repo role can manage discussion badges
ghspecterops
https://docs.specterops.io/mythic-agents/apfell-docs/commands/get_config
get_config - SpecterOps Open Source
Gets the current running config via the C2 class
getconfigspecteropsopensource
https://bloodhound.specterops.io/opengraph/extensions/scim/edges/scim_managerof
SCIM_ManagerOf - SpecterOps
User is a manager of another user
scimspecterops
https://bloodhound.specterops.io/resources/edges/abuse-tgt-delegation
AbuseTGTDelegation - SpecterOps
The trust from the target node domain to the source node domain has TGT delegation enabled. When a resource in the source node domain is configured with...
specterops
https://docs.specterops.io/mythic-agents/merlin-agent-docs/commands/token
token - SpecterOps Open Source
Interact with Windows Access Tokens
tokenspecteropsopensource
https://bloodhound.specterops.io/opengraph/extensions/jamf/edges/jamf_updatecomputerextensions
jamf_UpdateComputerExtensions - SpecterOps
Represents the ability to update existing computer extension attributes and at least one extension attribute exists, allowing execution of code on all...
jamfspecterops
https://bloodhound.specterops.io/reference/asset-isolation/update-asset-group-tag-selector
Update Asset Group Tag Selector - SpecterOps
Update an asset group tag selector's properties
group tagupdateassetselectorspecterops
https://specterops.io/blog/tag/tines/
Tines Archives - SpecterOps
tinesarchivesspecterops
https://docs.specterops.io/ghostpack-docs/SharpDPAPI-mdx/sharpchrome-cookies
SharpChrome Cookies - SpecterOps Open Source
Extract and decrypt browser cookies from Chrome, Edge, Brave, and Slack for session hijacking and persistence
sharpchromecookiesspecteropsopensource
https://specterops.io/blog/author/ademouraspecterops-io/
Allen DeMoura, Author at SpecterOps
allenauthorspecterops
https://docs.specterops.io/mythic-agents/merlin-agent-docs/commands/execute-pe
execute-pe - SpecterOps Open Source
Convert a Windows PE into shellcode with Donut, execute it in the spawnto process, and return the output
executepesource
https://docs.specterops.io/mythic-docs/database-schema
Database Schema - SpecterOps Open Source
database schemaspecteropsopensource
https://bloodhound.specterops.io/home
Home - SpecterOps
specterops
https://docs.specterops.io/mythic-agents/apollo-docs/documentation-payload/apollo/commands/getprivs
getprivs - SpecterOps Open Source
Converted from Markdown to MDX
specteropsopensource
https://specterops.io/resources/azure-security-fundamentals/
Azure - SpecterOps
Mar 16, 2026 - Adversary Perspectives: Azure aims to provide participants without previous Azure experience with a solid understanding of how attackers look at Microsoft...
azurespecterops
https://www.nasdaqprivatemarket.com/company/specterops/
Sell or Invest in SpecterOps Stock Pre-IPO
May 14, 2026 - Get started to view information about SpecterOps stock. Explore insights and opportunities to sell or invest in SpecterOps shares pre-ipo.
invest insellspecteropsstockpre
https://docs.specterops.io/ghostpack-docs/SharpDPAPI-mdx/commands/blob
blob - SpecterOps Open Source
Decrypt arbitrary DPAPI blob data
blobspecteropsopensource
https://docs.specterops.io/ghostwriter-docs/workflow/basic-usage/finding-review-workflow
Finding Edit & Review Workflow - SpecterOps Open Source
findingeditreviewworkflowspecterops
https://bloodhound.specterops.io/opengraph/extensions/github/edges/gh_writerepopullrequests
GH_WriteRepoPullRequests - SpecterOps
[Repository] Repo role can create and merge pull requests
ghspecterops
https://lifestyle.thedam.fm/story/56556/specterops-launches-bloodhound-scentry-to-accelerate-the-practice-of-identity-attack-path-management/
SpecterOps Launches BloodHound Scentry to Accelerate the Practice of Identity Attack Path...
bloodhound scentry
https://bloodhound.specterops.io/opengraph/extensions/github/edges/gh_canassumeidentity
GH_CanAssumeIdentity - SpecterOps
Repository can assume this cloud identity via OIDC federation (Azure workload identity or AWS IAM role)
ghspecterops