BloodHound — AD attack path management
BloodHound maps Active Directory relationships and permission chains to surface attack paths that would be invisible in raw logs or GUI tools. It builds a graph of users, groups, computers, and trust relationships, then queries it to find routes to high-value targets like Domain Admin. Red teamers use it for post-compromise enumeration; blue teams use it to find and fix the paths before they're exploited. Essential for anyone auditing AD security or running adversary simulations.