BloodHound.py (Python collector)

bloodhound-python -u <user> -p '<pass>' -d <domain> -c All -ns <dc-ip>

Active Directory data collector for BloodHound, executable from Linux/macOS.

When you have domain credentials and want to visually map attack paths. bloodhound-python is the cross-platform version of the collector, ideal when you don't have access to a Windows machine or want to automate collection. You run it from your VM and generate a zip to import into BloodHound.

If the domain is very large (more than 10,000 objects), collection can be slow and consumes many DC resources. Also if you don't have credentials or if the DC doesn't allow LDAP queries from your IP (source restriction).