v5.6.0-rc1

What's Changed

• Fix empty request_id and incorrect elapsed time in logs by @juggernot325 in #323
• Bed 3859 - Fix inaccurate count strategy in paginated SQL queries by @mistahj67 in #317
• Bed 4003 - DCFor edge by @rvazarkar in #315
• fix: Filter out group nodes from GPO affected T0 queries by @mistahj67 in #325
• Esc6a finding entity panel by @benwaples in #311
• CanAbuseUPNCertMapping finding panel by @benwaples in #316
• CanAbuseWeakCertBinding finding panel by @benwaples in #321
• New permission ClientsRead and new router middleware RequireAtLeastOnePermission by @elikmiller in #324
• PostgreSQL by @zinic in #253
• fix: Go 1.21 cleanup by @superlinkx in #329
• fix: revert select schemagen changes by @zinic in #332
• Fix cursor jump issue in ExploreSearchCombobox by @definitelynotagoblin in #334
• Edge entity panel updates by @JonasBK in #314
• feat: static analysis by @superlinkx in #327
• Revert ip bind to 0.0.0.0 by @nurfed1 in #337
• Docker Compose QoL by @superlinkx in #306
• Merge Stage/v5.5.0 into Main by @zinic in #338
• feat: esc6a post by @urangel in #322
• add 9a and 9b edges to ad.cue by @brandonshearin in #336
• fix: static analysis findings by @superlinkx in #341
• Esc9a finding panel by @benwaples in #326
• Esc10a finding panel by @benwaples in #330
• chore: dev environment QoL updates by @superlinkx in #339
• chore: debug logging for test databases by @superlinkx in #346
• add ESC 9A to the edge filter dialog by @brandonshearin in #344
• add ESC6a to edge finding by @irshadaj in #352
• feat: static analysis plumbing for BHCE by @superlinkx in #353
• ESC9A Post Processing by @rvazarkar in #340
• ESC 9b Finding Panel by @benwaples in #349
• chore: remove unnecessary complexity in the data pipeline by @zinic in #347
• fix: not ingesting tenant count during azure analysis by @mistahj67 in #328
• ESC9a Edge Composition by @rvazarkar in #354
• docs: Add to ESC3 abuse info by @JonasBK in #350
• docs: add note in ESC6 abuse info by @JonasBK in #356
• ADCS cypher queries by @JonasBK in #342
• feat: esc6a edge composition by @urangel in #359
• ESC10a Post Processing by @rvazarkar in #360
• feat: filter out ESC3 false positives by @JonasBK in #351
• Datapipe State Transition Hardening and ADCS Post Processing Fixes by @zinic in #363
• ESC10a Edge Composition by @rvazarkar in #366
• chore: edge composition check from list of constants by @urangel in #368
• New role "Power User" by @elikmiller in #343
• feat: add esc10 edges to path filter and default list by @urangel in #369
• ESC6B: Post processing by @brandonshearin in #370
• chore: slices cleanup by @superlinkx in #361
• fix: stricter static analysis by @superlinkx in #355
• fix: read only missing AuthCreateToken by @mistahj67 in #378
• ESC9b -- post processing by @maffkipp in #376
• feat: add edge information panel components for ADCSESC10b by @elikmiller in #377
• ESC 6B Edge Composition by @brandonshearin in #379
• feat: esc10b post processing by @urangel in #380
• Add ADCSESC6b edges to pathfinding queries, ensure ADCSESC6b edges are considered post-processed edges. by @elikmiller in #385
• Audit Log Refactor by @juggernot325 in #345
• Bed 4069 by @benwaples in #383
• Remove ADCS feature flag gates by @rvazarkar in #388
• Generate audit logs on login by @juggernot325 in #382
• Group management filtering by @benwaples in #387
• Support export logging by @superlinkx in #386

New Contributors

• @mistahj67 made their first contribution in #317
• @definitelynotagoblin made their first contribution in #334
• @nurfed1 made their first contribution in #337

Full Changelog: v5.5.0-rc2...v5.6.0-rc1

BloodHound CE v5.5.0

What's Changed

• chore: refactor panics out of string method generation by @urangel in #136
• BREAKING CHANGE!!! Selectors endpoint updates by @irshadaj in #268
• feat: add partnertier2support and members to tier-zero/high-value dur… by @ddlees in #269
• Fix: Add and update field names in schema by @StephenHinck in #275
• Tag/untag nodes from context menu by @brandonshearin in #259
• Group Management Page by @maffkipp in #195
• Asset group mock endpoint by @benwaples in #288
• Stage/v5.4.0 by @rvazarkar in #281
• Added a Helm chart for Kubernetes support by @vtrenton in #283
• Integration test for IssuedSignedBy edge by @maffkipp in #287
• fix: patch docker compose port forwarding to always use localhost by @superlinkx in #289
• Corrections in ACL/ACE Abuses Descriptions by @Pri3st in #262
• pathfinding bug fix by @brandonshearin in #284
• Make sure that only valid labels are displayed by @uidzeroo in #293
• chore: missing docs for localhost change by @superlinkx in #294
• added canAbuseUPNCert edge by @irshadaj in #298
• ParseKind/ParseKinds Refactor and Testing by @superlinkx in #296
• fix: merge v5.4.1 bug fixes by @ddlees in #309
• Add new audit log fields by @juggernot325 in #310
• added CanAbuseWeakCertBinding edge for ADCS ESC6 by @irshadaj in #300
• clean up operations and add some todos by @irshadaj in #313
• docs: fix esc3 abuse cmdlet by @JonasBK in #302
• Added multiple features to helm chart example as well as docs by @vtrenton in #290
• Update Domain Users RDP Query for case sensitivity by @StephenHinck in #320
• Esc 3 by @rvazarkar in #230
• feat: schema definitions for new cert template properties and logic update to EnrollOnBehalfOfSelfControl by @urangel in #308
• DCFor: edge info panel static content by @brandonshearin in #319
• Esc6b finding entity panel by @benwaples in #312
• chore: bump available SharpHound version to 2.3.1 by @elikmiller in #331
• add CanAbuse edges to postProcessed relationships by @irshadaj in #333

New Contributors

• @vtrenton made their first contribution in #283
• @Pri3st made their first contribution in #262

Full Changelog: v5.4.1...v5.5.0

v5.5.0-rc3

What's Changed

• chore: bump available SharpHound version to 2.3.1 by @elikmiller in #331
• add CanAbuse edges to postProcessed relationships by @irshadaj in #333

Full Changelog: v5.5.0-rc2...v5.5.0-rc3

v5.5.0-rc2

What's Changed

• Esc 3 by @rvazarkar in #230
• feat: schema definitions for new cert template properties and logic update to EnrollOnBehalfOfSelfControl by @urangel in #308
• DCFor: edge info panel static content by @brandonshearin in #319
• Esc6b finding entity panel by @benwaples in #312

Full Changelog: v5.5.0-rc1...v5.5.0-rc2

v5.5.0-rc1

What's Changed

• chore: refactor panics out of string method generation by @urangel in #136
• BREAKING CHANGE!!! Selectors endpoint updates by @irshadaj in #268
• feat: add partnertier2support and members to tier-zero/high-value dur… by @ddlees in #269
• Fix: Add and update field names in schema by @StephenHinck in #275
• Tag/untag nodes from context menu by @brandonshearin in #259
• Group Management Page by @maffkipp in #195
• Asset group mock endpoint by @benwaples in #288
• Stage/v5.4.0 by @rvazarkar in #281
• Added a Helm chart for Kubernetes support by @vtrenton in #283
• Integration test for IssuedSignedBy edge by @maffkipp in #287
• fix: patch docker compose port forwarding to always use localhost by @superlinkx in #289
• Corrections in ACL/ACE Abuses Descriptions by @Pri3st in #262
• pathfinding bug fix by @brandonshearin in #284
• Make sure that only valid labels are displayed by @uidzeroo in #293
• chore: missing docs for localhost change by @superlinkx in #294
• added canAbuseUPNCert edge by @irshadaj in #298
• ParseKind/ParseKinds Refactor and Testing by @superlinkx in #296
• fix: merge v5.4.1 bug fixes by @ddlees in #309
• Add new audit log fields by @juggernot325 in #310
• added CanAbuseWeakCertBinding edge for ADCS ESC6 by @irshadaj in #300
• clean up operations and add some todos by @irshadaj in #313
• docs: fix esc3 abuse cmdlet by @JonasBK in #302
• Added multiple features to helm chart example as well as docs by @vtrenton in #290
• Update Domain Users RDP Query for case sensitivity by @StephenHinck in #320

New Contributors

• @vtrenton made their first contribution in #283
• @Pri3st made their first contribution in #262

Full Changelog: v5.4.1...v5.5.0-rc1

v5.4.1

What's Changed

• refactor: parameterize ura enforcement for CanRDP processing by @ddlees in #295
• fix: prevent analysis failure when entity properties are not found by @urangel
• fix: close connections on adcs post-processing failures by @rvazarkar in #305

Full Changelog: v5.4.0...v5.4.1

v5.4.1-rc2

What's Changed

• Failure to close connections can lead to conn exhaustion by @rvazarkar in #305

Full Changelog: v5.4.1-rc1...v5.4.1-rc2

v5.4.1-rc1

What's Changed

• refactor: parameterize ura enforcement for CanRDP processing by @ddlees in #295
• fix: prevent analysis failure when entity properties are not found by @urangel

Full Changelog: v5.4.0...v5.4.1-rc1

BloodHound CE v5.4.0

What's Changed

• Fix environment variable for postgres database by @uidzeroo in #141
• Update unsupported OS cypher query to include Server 2012 by @Dcellular in #134
• get audit logs endpoints fixes and doc updates by @irshadaj in #149
• feat: improve ux for data ingestion by @urangel in #123
• Add "Update Asset Group Selectors" endpoint by @maffkipp in #138
• Better hygiene on asset group members endpoint by @brandonshearin in #137
• fix: ensure azexecutecommand is only set for intune admins by @ddlees in #139
• Fix AZMGGrantAppRoles to AZMGGrantRole by @SadProcessor in #156
• log missing azure tenant ids during analysis by @irshadaj in #158
• added owned node capability in API by @irshadaj in #164
• fix asset group error, add integration test by @irshadaj in #167
• Consolidated icon definitions by @maffkipp in #162
• User Saved Cypher Queries by @brandonshearin in #129
• remove ingest endpoint from community documentation by @irshadaj in #168
• Update unsupported OS cypher query to include Windows 8 and Windows NT, and remove false positives by @martinsohn in #163
• BED-3845 - Improve and fix Azure saved queries by @StephenHinck in #169
• Remove Gorm AutoMigrate by @superlinkx in #159
• fix: update test to only check major/minor/patch by @superlinkx in #172
• Fix query for 'Shortest paths from Kerberoastable users' by @egglessness in #173
• Update jira-issue-transfer.yml by @slokie-so in #177
• fix: stepwise was making new migrations on every restart by @superlinkx in #179
• increase dawgs memory limit to 2gb by @irshadaj in #184
• Merge Staging Fixes into Main by @zinic in #192
• Update luxon format enum by @benwaples in #188
• fix double logging issues by @irshadaj in #194
• fix: disable_cypher_qc and other 3+ segment JSON keys by @superlinkx in #190
• feat: container entity panel by @JonasBK in #205
• Update jira-issue-transfer.yml by @slokie-so in #214
• Update jira-issue-transfer.yml by @slokie-so in #217
• Correct Fields field by @slokie-so in #219
• Fix import of relationships with wrong casing by @FrodeHus in #211
• allow asset group selectors with the same name to exist under different asset groups by @irshadaj in #210
• Entity info count fallback by @benwaples in #200
• feat: update azresetpassword processing to start from role nodes inst… by @ddlees in #202
• context menu with node actions by @brandonshearin in #196
• BED-3893: stepwise migration rework by @codydbentley in #222
• fix: remove BHE schema from schema file by @superlinkx in #229
• Add fields to exclusion list by @benwaples in #231
• Warning when disabling MFA by @benwaples in #232
• BED-3924: Update Domain Users RDP searches for case sensitivity by @StephenHinck in #239
• Add BloodHound slack link and update quick-deploy by @StephenHinck in #244
• fix: missing user IDs for saved cypher queries by @maffkipp in #245
• Quick tag selectors (reapply to main) by @superlinkx in #252
• Merge stage/v5.3.0 by @superlinkx in #243
• Merge stage/v5.3.1 by @rvazarkar in #264
• Feature: Ingestion and identification of ADCS nodes and edges by @juggernot325 in #235
• fix: Unmark the python installation as externally managed when buildi… by @elikmiller in #267
• fix: gorm override column names for domain_collection_results by @urangel in #270
• ADCS API Doc Updates by @juggernot325 in #271
• More ADCS API Doc Improvements by @juggernot325 in #274
• fix: add golden cert edge to post processed edges list by @urangel in #276
• Make ESC1 Edge Composition significantly more performant by @rvazarkar in #273
• chore: add ingest integration tests for adcs information by @urangel in #256
• fix: ensure that nested IssuedSignedBy relationships expand in adcs e… by @zinic in #285

New Contributors

• @uidzeroo made their first contribution in #141
• @SadProcessor made their first contribution in #156
• @martinsohn made their first contribution in #163
• @egglessness made their first contribution in #173
• @slokie-so made their first contribution in #177
• @FrodeHus made their first contribution in #211

Full Changelog: v5.1.0...v5.4.0

What's Changed

• Add fields to exclusion list by @benwaples in #231
• Warning when disabling MFA by @benwaples in #232
• BED-3924: Update Domain Users RDP searches for case sensitivity by @StephenHinck in #239
• Add BloodHound slack link and update quick-deploy by @StephenHinck in #244
• fix: missing user IDs for saved cypher queries by @maffkipp in #245
• Quick tag selectors (reapply to main) by @superlinkx in #252
• Merge stage/v5.3.0 by @superlinkx in #243
• Merge stage/v5.3.1 by @rvazarkar in #264
• Feature: Ingestion and identification of ADCS nodes and edges by @juggernot325 in #235
• fix: Unmark the python installation as externally managed when buildi… by @elikmiller in #267
• fix: gorm override column names for domain_collection_results by @urangel in #270
• ADCS API Doc Updates by @juggernot325 in #271
• More ADCS API Doc Improvements by @juggernot325 in #274
• fix: add golden cert edge to post processed edges list by @urangel in #276
• Make ESC1 Edge Composition significantly more performant by @rvazarkar in #273
• chore: add ingest integration tests for adcs information by @urangel in #256
• fix: ensure that nested IssuedSignedBy relationships expand in adcs e… by @zinic in #285

Full Changelog: v5.3.1...v5.4.0

v5.4.0-rc5

What's Changed

• fix: ensure that nested IssuedSignedBy relationships expand in adcs e… by @zinic in #285

Full Changelog: v5.4.0-rc4...v5.4.0-rc5