user_info
Query BloodHound for user attributes, admin rights, group memberships, sessions, and other security data. Use info_type to select specific details like RDP or SQL admin rights.
Instructions
Query user data from BloodHound info_type options: info - General user properties and attributes admin_rights - machine/objects this user has admin rights on constrained_delegation - services this use can delegate to via kerberos controllables - objects this use can control (WriteOwner, GenericAll, etc.) controllers - principals that have control over this user dcom_rights - machines this user can execute DCOM on memberships - groups this user belongs to ps_remote_rights - machines this user can PSRemote to rdp_rights - machines this user can RDP to sessions - machines this user has active sessions sql_admin_rights - SQL servers this user is admin on
Args:
user_id: BloodHound object ID of the user (required)
info_type: what to retrieve (default: info)
limit: Max Results (default 100, useful in large environments)
skip: Pagination offset (default 0)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| skip | No | ||
| limit | No | ||
| user_id | Yes | ||
| info_type | No | info |