Skip to main content
ReleaseBloodHoundSharpHoundAzureHound
2026-01-21v8.5.0v2.9.0v2.8.3
Use the filters on the right side of this page to narrow down the updates by component. You can select multiple filters at the same time to refine your results.
​
BloodHound
New Feature

​
Keyboard Shortcuts

Navigate and interact with BloodHound using keyboard shortcuts.BloodHound now includes a variety of keyboard shortcuts to enhance navigation and streamline interactions across the platform.These shortcuts allow you to quickly access features, execute commands, and navigate between pages without relying solely on mouse input, improving accessibility and efficiency for power users.
A view of the BloodHound keyboard shortcuts dialog, which lists all available shortcuts and their corresponding actions.
​
BloodHound
Enhancement

​
Cypher

See the progress of Cypher queries with enhanced visual feedback.The Run button in the Cypher search tab now provides a Running… status that indicates when a query is in progress, improving the overall query execution experience.An animated view of the Cypher search tab showing the Run button changing to a Running... status while a query is executing, then reverting back to Run once the query is complete.
​
BloodHound
Enhancement

​
Custom Date Range Time Input

Customize time values in posture date range filters.The custom date range filter on the Posture page now includes a time picker that allows you to specify the exact time when filtering attack paths by date range.This resolves an issue where the preset date range options used different times of day than the custom date range, which caused inconsistencies in attack path visibility between preset and custom date ranges.
A view of the BloodHound posture page custom date range filter, showing the new time picker input that allows users to specify a time value in addition to the date when filtering attack paths by date range.
​
BloodHound
Enhancement

​
Privilege Zone Management (Renamed)

Build and manage privilege zones with the newly renamed Zone Builder.The Privilege Zone Management page has been renamed Zone Builder to better reflect its purpose as a tool for building and managing zones that represent different levels of privilege within your environment.
A view of the Zone Builder page, which was renamed from Privilege Zone Management this release.
This enhancement includes several layout and navigation improvements, as well as updates to terminology. Keep reading for details!

​
Zone and Label Dropdown Menus

The zone and label Details View now includes dropdown menus for navigating between different zones and labels, providing a more intuitive and efficient way to explore zone and label details.

​
Zones

Enterprise EditionThe zone dropdown menu in the Details View now uses consistent iconography to improve visual recognition and navigation.The (gem) icon represents the default Tier Zero zone. A new zone icon represents all other zones (unless you’ve applied a custom glyph to the zone configuration).
A view of the BloodHound main navigation menu showing the new shield icon used for the Zones page, which is now consistent with the iconography used on the Zone Builder page and other zone-related features across the platform.

​
Labels

The label Details View also includes a similar dropdown menu, but does not include icons.
A view of the BloodHound main navigation menu showing the new tag icon used for the Labels page, which is now consistent with the iconography used on other label-related features across the platform.

​
Rules

Navigating the zone and label Details View is now more intuitive with categories that group rules based on function:
  • All Rules: View all rules that apply to the zone or label
  • Custom Rules: View rules that you have created
  • Default Rules (zones only): View default rules that come pre-configured with BloodHound
  • Disabled Rules: View rules that are currently disabled, regardless of whether they are default or custom
    To see objects for disabled rules, you must re-enable the rule.
    A view of the Zone Details View showing the new rule categories that group rules based on function: All Rules, Custom Rules, Default Rules, and Disabled Rules.

​
Members (Renamed)

The Zone Builder (formerly Privilege Zone Management) page and tabs now use the term “objects” instead of “members” to refer to the objects that rules pull into zones and labels.This change provides more accurate terminology because “members” can be misleading. Rules can tag both objects that directly match object IDs or Cypher queries and objects that BloodHound tags through expansion.The new term “objects” encompasses both directly matched and expanded objects, providing clearer communication about how rules function and the resulting tagged objects in zones and labels.

​
Zone and Label Details

The zone and label Details View now displays details in the following tabs:
  • Zone: Displayed by default when opening the zone Details View. This tab includes name, description, update history, and status.
  • Label: Displayed by default when opening the label Details View. This tab includes name, description, and update history.
  • Rule: Displayed after selecting a rule. This tab includes name, description, update history, certification state (for zones), type, status, and Cypher query (if applicable).
  • Object: Displayed after selecting an object. This tab shows the Entity panel containing object properties and relationships.
    An animated view of the Details View in the Zone Builder page showing the information that appears in the details panel on the right-hand side of the screen when selecting a rule or object, including the object's type and the rule that caused it to be included in the zone or label.
​
BloodHound
Enhancement

​
Rules Form

Create and edit rules with enhanced form features and clearer insights.The form for creating and editing rules in the Zone Builder now includes several enhancements to improve usability and provide clearer insights into rule configuration and results.

​
Rule Status

This is a minor enhancement, but one that provides a concise call-to-action for users managing rules.When enabling or disabling rules, you’ll now see Enable Rule instead of Rule Status with the status on the same line as the toggle.
A view of the Edit Rule page in Zone Builder showing the updated Enable Rule toggle.

​
Direct and Expanded Objects in Sample Results

BloodHound now separates direct matches (objects that directly match the rule criteria) from expanded matches (objects that are connected to direct matches based on expansion) in the Sample Results panel when defining rules.This enhancement provides clearer insights into how rules are applied and which objects are being tagged as a result.
A view of the Sample Results panel in the Zone Builder page showing the separation between direct matches and expanded matches when defining a rule

​
Improved In-Product Guidance for Creating Rules

BloodHound now provides improved messaging when you define Cypher-based rules for zones and labels. If you try to save a Cypher-based rule without first clicking Update Sample Results, you’ll see a prompt to do so before allowing you to save the rule.
A view of the Zone Builder page showing the improved messaging that prompts users to update sample results before saving a Cypher-based rule
​
BloodHound
Enhancement

​
Zone and Label Forms

Manage zones and labels with an improved form layout and clearer messaging.BloodHound now provides improved layout and messaging for managing zones and labels, including the following updates:
  • The Delete Zone button has been moved to the top of the form.
  • A new message at the top of the form specifies the remaining number of zones or labels that you can create and a link to contact sales to increase the limit.
  • A (lock) icon now appears next to the Tier Zero zone in the Zone Order panel to indicate its protected status.
For zones specifically, the form now also includes the following updates:
  • The Enable Analysis option has been moved to the top of the form for better visibility.
  • The Require Certification option has been renamed to Enable Certification for consistency across other forms.
    A view of the Zone Form showing the improved layout and messaging for creating and editing zones
​
BloodHound
New Feature

​
Count by Kind for Selectors

Retrieve member counts by primary kind for asset group tag selectors using a new API endpoint./api/v2/asset-group-tags/{asset_group_tag_id}/selectors/{asset_group_tag_selector_id}/members/counts
​
BloodHound

​
Attack Path Analysis

Enterprise Edition Resolved an issue causing inconsistent attack path visibility. Previously, the preset date range options on the Posture page used different times of day than the Custom Range option. A new time picker is now available for custom date ranges to resolve this inconsistency.

​
Explore

Resolved an issue where the search option at the bottom of the Explore page on the Pathfinding or Cypher tabs displayed “unknown” edges in suggested results. Suggested results now return nodes only.

​
OpenGraph

Resolved an issue where OpenGraph file ingestion reported “All files failed to ingest as JSON Content” when files contained unresolved relationships. The file upload API now properly handles partial failures.

​
Zone Builder

  • Resolved an issue where creating a large number of rules could exceed database connection limits, fail silently, and prevent tagging objects as expected.
  • Resolved an issue where object expansion in rules fails silently and prevents tagging members as expected.
  • Resolved an issue where the Total Count (renamed to Total Objects this release) on the zone and label Details View displayed inaccurate object totals when filtering between domains.
  • Enterprise Edition Resolved an issue where the Tier Zero Exposure value in the domain filter on the Attack Paths and Posture pages displayed the same percentage across all zones, preventing an accurate assessment of exposure metrics for individual zones.
  • Enterprise Edition Resolved an issue on the Certifications page where clicking Certify or Revoke without first selecting an object displayed the Add Note modal. The buttons are now deactivated until you select an object.
  • Enterprise Edition Resolved an issue where analysis failed on Cypher-based rules. Rules now properly ignore edges and select nodes only.