domain_info
Retrieve domain-level data from BloodHound for Active Directory analysis: list domains, search objects, and get details on users, groups, computers, GPOs, trusts, and DCSync rights.
Instructions
Query domain level data from BloodHound info_type options: list - list all domains (no domain_id needed) info - domain entity info (needs domain_id) search - search objects by name/ID (needs query param, domain_id not needed) users - users in the domain groups - groups in the domain computers - computers in the domain controllers - security prinicpals with control relationships gpos - Group Policy Objects ous - Organizational unites dc_syncers - Principals with DCSync rights foreign_admins - admins from other domains foreign_gpo_controllers - GPO controllers from other domains foreign_groups - groups with cross domain members foreign_users - users referenced across domains inbound_trusts - domains that trust this domain outbound_trusts - domains this domain trusts linked_gpos - linked GPOs in this domain adcs_escalations - ADCS escalation findings in this domain Args: info_type: what to retrieve (default: list) domain_id: Domain object ID (required for most info_types) query: Search text (for info_type=search only) object_type: Filter by type - User, computer, Group, GPO, OU, Domain, AZUer, etc. (search only) limit: Max Results (default 100, useful in large environments) skip: Pagination offset (default 0)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| skip | No | ||
| limit | No | ||
| query | No | ||
| domain_id | No | ||
| info_type | No | list | |
| object_type | No |