AutoHound v0.1.0

AutoHound v0.1.0

LLM-powered Active Directory attack path analysis.

what it does

• feeds BloodHound data into Claude
• surfaces privilege escalation chains your queries miss
• outputs ATT&CK-mapped commands (PowerView, Impacket, Rubeus)

requirements

• Anthropic API key (get at console.anthropic.com)
• BloodHound JSON export from SharpHound
• Python 3.11+ (for source install)

quickstart — windows exe

# download AutoHound-v0.1.0-windows-x64.exe
# create .env file with: ANTHROPIC_API_KEY=your_key
.\AutoHound.exe --input bloodhound_data.json --output ./reports

quickstart — pip install

pip install autohound
# or: pip install AutoHound-v0.1.0.tar.gz

# create .env with API key
autohound --input bloodhound_data.json --output ./reports

what you get

• markdown report with attack paths, commands, ATT&CK mapping
• attack_navigator_layer.json (import at mitre-attack.github.io/attack-navigator/)

---

authorized environments only
© 2026 Gordon Prescott — ACH Research Division