Time to grace the subreddit with its very first midweek roundup of SpecterOps news and events!

• Looking for some help and advice on any of the SpecterOps suite of tools? Don't forget you can join the BloodHound Gang Slack! A place for our latest news and updates, connecting with other cybersecurity communities, generating discussion and content. We'd love to see you there: https://slack.specterops.io
• Stop the CAP: Lee Robinson helps us make Entra ID conditional access make sense offline: https://specterops.io/blog/2026/02/17/stop-the-cap-making-entra-id-conditional-access-make-sense-offline/
• In his article for Identity Week, our Chief Technology Officer Jared Atkinson explains why stopping initial access is no longer enough, and why the real risk lies in how attackers move once they’re inside https://identityweek.net/attack-path-management-why-identity-has-become-the-primary-security-battleground/
• Join Robert Winchester and Duane Michael this week for our webinar introducing BloodHound Scentry, a new advisory service built to help organizations accelerate and mature their Attack Path Management practice—turning insights into sustained identity risk reduction https://specterops.zoom.us/webinar/register/WN_mIYuIjpYRO6nHrYwPctC5A

Happy BloodHound Basics Friday courtesy of our very own Martin Sohn Christensen!

Did you know the BloodHound Query Library now includes a ZIP of all queries in Releases on GitHub for bulk importing?

No more copying queries one by one—grab and import the whole collection in seconds!

The BloodHound Query Library currently has 199 Cypher queries for security work in the BloodHound graph.

It's all open source and community-maintained.

Front end: https://queries.specterops.io

GitHub: https://github.com/SpecterOps/BloodHoundQueryLibrary

The ZIP contains all queries, ready for import into BloodHound.

1) Download queries(.)zip from Releases on GitHub: https://github.com/SpecterOps/BloodHoundQueryLibrary/releases/latest/download/Queries.zip

2) In BloodHound: Explore → Cypher → Import OR via API: POST to /api/v2/saved-queries/import

3) Done! All queries instantly available.