get_edge_composition
Analyze complex security relationships by breaking down high-level edges into their underlying components to understand how principals are connected in Active Directory.
Instructions
Analyze the components of a complex edge between two nodes.
In Bloodhound, many high-level edges (like "HasPath" or "AdminTo") are composed of multiple
individual relationships. This function reveals those underlying components.
This is useful for understanding exactly how security principals are connected.
Args:
source_node: ID of the source node
target_node: ID of the target node
edge_type: Type of edge to analyze (e.g., "MemberOf", "AdminTo", "CanRDP")
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| source_node | Yes | ||
| target_node | Yes | ||
| edge_type | Yes |