Why "least Privilege" Fails In Real Environments

Know Your Adversary | Runzero With Special Guest Hd Moore (ep. 12)

Stretching Bhe Horizontally: Identity Security At Unusual Scale | So-con 26

Not Just Cookies: Modern Session Abuse | So-con 26

Nobody Puts Bloodhound In A Corner: Infusing Apm Into Your Identity Protection Strategy | So-con 26

Pipelines Of Privilege: Attack Paths From Devops To Mlops Infrastructure | So-con 26

Workshop: Build Your Own Opengraph Collector | So-con 26

Exposing Sccm And Mssql Attack Paths In Hardened Environments With Opengraph | So-con 26

Tiers For Fears: How Every Attacker Wants To Rule Your World | So-con 26

Divide And Conquer: A Many Subgraphs Approach To Hybrid Attack Path Management | So-con 26

Your Ci/cd Pipeline Is My Attack Path: Graphing Github Oidc To Cloud Takeover | So-con 2026

State Of Identity Attack Path Management | So-con 26

Sccm: The Tree That Always Bears Bad Fruits | So-con 26

Okta For Good And Bad: Hybrid Attack Paths Crossing Okta Organizations | So-con 26

4 Get Requests = 3 Domain Admins: Cyberark Magic You Didn’t Know About | So-con 26

Mapping Gitlab Attack Paths Into Bloodhound With Opengraph | So-con 26

Mapping The Adversary: Enriched Incident Graphs With Bloodhound Data In Kusto | So-con 26

Hybrid Attacks And Identities In Motion: Anatomy Of Modern Attack Paths | So-con 26

Mapping Shadows In The Cloud: Exploring Google Cloud Attack Paths With Gcp-hound And Og | So-con 26

Relatively Risky: Identifying Exposures At Scale With Bloodhound Opengraph | So-con 26