#specterops

AD Is a Graph: How BloodHound Made Defenders Think Like Attackers

May 25, 2026

From Lambert's 2015 essay to Microsoft Security Exposure Management in 2024 -- how the attack-path graph became the default model for Active Directory security.