StormSpotter

• is this maintained anymore?

Using StormSpotter

• nice to check one’s access rights

PS C:\AzAD\Tools> cd .\stormspotter\backend\
PS C:\AzAD\Tools\stormspotter\backend> pipenv shell
Launching subshell in virtual environment...
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.
 
PS C:\AzAD\Tools\stormspotter\backend> python.exe .\ssbackend.pyz

PS C:\> cd .\AzAD\Tools\stormspotter\frontend\dist\spa\
PS C:\AzAD\Tools\stormspotter\frontend\dist\spa> quasar.cmd serve -p 9091 --history

PS C:\> cd .\AzAD\Tools\stormspotter\stormcollector\
PS C:\AzAD\Tools\stormspotter\stormcollector> pipenv shell
Launching subshell in virtual environment...
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.
 
PS C:\AzAD\Tools\stormspotter\stormcollector> az login -u [email protected] -p V3ryH4rdt0Cr4ckN0OneC@nGu355ForT3stUs3r
 
 python C:\AzAD\Tools\stormspotter\stormcollector\sscollector.pyz cli

http://localhost:9091 → neo4j:BloodHound

Some queries:

MATCH (a)-[r]-(t:AADRole) RETURN *
 
MATCH (a:AADUser)-[r]-(t) RETURN *