Walking Through an Attack Path with ForceHound

ForceHound is an open-source Python collector that renders Salesforce profiles, permission sets, and sharing rules as a BloodHound CE identity graph, bringing AD-style attack path analysis to CRM.

ADPathFinder extends BloodHound CE by unifying SharpHound with OpenGraph collectors, mapping privilege escalation paths across AD, ADCS, MSSQL, and SCCM plus context-aware password audits.

Webinar recap with BloodHound co-creator Andy Robbins: Active Directory is a soft target because deployment misconfigurations and risky defaults—not code flaws—open its widest doors to attackers.

AD-PathFinder maps attack paths from low-privileged users to Domain Admins using SharpHound and OpenGraph data, natively covering AD, ADCS, SCCM, and MSSQL, including password risk audits.

Discover the cascading risks of malicious Connected Apps in Salesforce. Learn how to assess business impact, secure your org, and protect critical infrastructure.

This Salesforce security primer covers unintentional data exposure through unsecured SOQL in Apex code, cleartext credentials, managed package namespaces, and REST API access patterns.