BP-2735: Release notes (2026-07-07) by jeff-matthews · Pull Request #333 · SpecterOps/bloodhound-docs

jeff-matthews · 2026-06-30T20:51:09Z

Purpose

This pull request (PR) adds release notes for the v9.4.0 BloodHound release cycle to the release integration branch, which includes:

BloodHound v9.4.0
OpenHound v0.2.11 (also includes issues from undocumented iterations since v0.2.1)

No release for:

SharpHound
AzureHound

There are several related PRs for supporting documentation that also need to be reviewed and merged separately to ensure alignment with release notes:

Staging

Summary by CodeRabbit

New Features
- Added a new release notes entry highlighting ADCS ESC14 Scenario A graph coverage and experimental graph ID lookup APIs.
- Documented new Enterprise analysis options, including a variable analysis mode for faster re-runs after privilege zone changes.
Enhancements
- Noted improved read-only access for auditors and updated default admin email guidance.
- Expanded Zone Builder authoring guidance and increased default query memory limits.
Bug Fixes
- Added multiple fixed issues across analysis, API, explore, OpenGraph, UI, findings, and collector stability.

coderabbitai · 2026-06-30T20:51:17Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 64ebd58c-bb90-4fb7-8002-ed88eea28abb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly matches the main change: adding release notes for 2026-07-07.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch BP-2735-release-notes

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

jeff-matthews · 2026-06-30T22:44:58Z

+
+<Update label="BloodHound" description="New Feature" tags={["Data Collection"]}>
+  {/*BED-6155*/}
+  ## ADCS ESC14 Scenario A Attack Paths


PR for supporting docs: #325

jeff-matthews · 2026-06-30T22:45:14Z

+
+<Update label="BloodHound" description="New Feature" tags={["API"]}>
+  {/*BED-8608, BED-8609*/}
+  ## Graph ID Lookup APIs


PR for supporting docs: #332

jeff-matthews · 2026-06-30T22:45:56Z

+
+<Update label="BloodHound" description="Enhancement" tags={["Administration"]}>
+  {/*BED-8189*/}
+  ## Updated Default Admin Email Address


PR for supporting docs: #303

jeff-matthews · 2026-06-30T22:46:46Z

+
+<Update label="BloodHound" description="Enhancement" tags={["Zone Builder"]}>
+  {/*BED-8276, BED-8781*/}
+  ## Variable Analysis Mode


PR for supporting docs: #335

jeff-matthews · 2026-06-30T22:47:08Z

+
+<Update label="BloodHound" description="Enhancement" tags={["Zone Builder"]}>
+  {/*BED-8303, BED-7739, BED-8520*/}
+  ## Privilege Zone Rule Authoring Improvements


PR for supporting docs: #336

jeff-matthews · 2026-07-01T14:42:11Z

+  - Continues collection more often when single-object errors occur
+  - Handles deferred pipeline failures more consistently
+  - Reports its version to BloodHound for visibility on the **Manage Clients** page
+  - Uses human-readable plain-text logs by default for file and stdout output, while keeping structured JSON as an opt-in format


PR for supporting docs: #337

StephenHinck

Slight tweak in verbiage

Co-authored-by: Stephen Hinck <shinck@specterops.io>

…notes

jeff-matthews · 2026-07-01T17:47:55Z

@coderabbitai review

coderabbitai · 2026-07-01T17:48:01Z

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/resources/release-notes/2026-07-07.mdx`:
- Around line 91-93: The <Note> block is indented in a way that makes it render
as code instead of an admonition. Unindent the Note markup in the release note
content so the MDX parser treats it as a proper Note component; locate the block
by the <Note> tag in the release-notes entry and remove the extra leading
indentation around that section.

In `@docs/resources/release-notes/summary.mdx`:
- Around line 54-56: Update the release notes summary link so it points directly
to the fixed-issues heading on the target page rather than the generic
BloodHound update anchor. In the summary.mdx section with the “Fixed Issues”
text, adjust the href to use the fixed-issues anchor generated for the relevant
`<Update>` entry, taking into account Mintlify’s auto-generated heading anchors
from the `label` prop and any incrementing suffix if the label is repeated. Use
the surrounding “Fixed Issues” block and the `release-notes` link as the
location cues.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: b8fe05d1-e5f6-4882-8888-2c76034bf407

📥 Commits

Reviewing files that changed from the base of the PR and between c955435 and 6737d05.

📒 Files selected for processing (4)

docs/docs.json
docs/manage-bloodhound/auth/users-and-roles.mdx
docs/resources/release-notes/2026-07-07.mdx
docs/resources/release-notes/summary.mdx

StephenHinck

left a bunch of comments - happy to peek again!

StephenHinck · 2026-07-01T19:57:49Z

+
+This release expands ADCS attack path coverage, opens more administration workflows to auditors in read-only mode, and improves OpenHound collection resilience. Key highlights include:
+
+- **New edges**: Model ADCS ESC14 Scenario A attack paths with new certificate-mapping edge coverage.


@JonasBK does ESC14 require a SharpHound upgrade to collect? I believe it does and we should make sure to notate as such.

Confirmed with @JonasBK in Slack that these edges do require a SharpHound upgrade. If we're not doing a SharpHound release this cycle, I'll need to hide the docs.

See #340 for details on hiding the docs.

StephenHinck · 2026-07-01T20:00:19Z

+
+<Update label="BloodHound" description="New Feature" tags={["Data Collection"]}>
+  {/*BED-6155*/}
+  ## ADCS ESC14 Scenario A Attack Paths


Add a note that new SHarpHound is required for this

New? I was told we're not doing a SharpHound release this cycle.

Removed from release notes since we won't have the necessary SharpHound release to enable.

Co-authored-by: Stephen Hinck <shinck@specterops.io>

zaton-netizen

good to go

slokie-so

Looks good

jeff-matthews added 9 commits June 30, 2026 12:00

wip: initial draft of v9.4.0 release notes

3abe25d

wip: added missing issues for variable analysis mode

f9a1708

wip: added cypher memory limit boost for enterprise

16efca3

wip: add enterprise only tags

6bcacac

wip: copyedited v9.4.0 features and enhancements

c04661e

wip: aligned v9.4.0 summary with detailed release notes

650b40f

wip: copyedited v9.4.0 fixed issues

b95fc57

wip: copyedited v0.2.10 OH fixed issues

e7833b1

chore: removed TODOs

08128b5

jeff-matthews self-assigned this Jun 30, 2026

jeff-matthews added the v9.4.0 label Jun 30, 2026

jeff-matthews commented Jun 30, 2026

View reviewed changes

jeff-matthews commented Jul 1, 2026

View reviewed changes

StephenHinck reviewed Jul 1, 2026

View reviewed changes

Comment thread docs/resources/release-notes/2026-07-07.mdx Outdated

StephenHinck reviewed Jul 1, 2026

View reviewed changes

Apply suggestion from @StephenHinck

7d4140f

Co-authored-by: Stephen Hinck <shinck@specterops.io>

mintlify Bot deployed to staging - docs July 1, 2026 16:57 View deployment

jeff-matthews added 2 commits July 1, 2026 12:31

Merge branch 'release/v9.4.0' into BP-2735-release-notes

4034bfa

chore: add cross refs to supporting docs; align summary with release …

6737d05

…notes

mintlify Bot deployed to staging - docs July 1, 2026 17:45 View deployment

jeff-matthews requested a review from slokie-so July 1, 2026 17:47

jeff-matthews marked this pull request as ready for review July 1, 2026 17:47

coderabbitai Bot reviewed Jul 1, 2026

View reviewed changes

Comment thread docs/resources/release-notes/2026-07-07.mdx

Comment thread docs/resources/release-notes/summary.mdx Outdated

fix: link to fixed issues

6075305

mintlify Bot deployed to staging - docs July 1, 2026 18:04 View deployment

jeff-matthews commented Jul 1, 2026

View reviewed changes

Comment thread docs/resources/release-notes/2026-07-07.mdx

jeff-matthews requested a review from StephenHinck July 1, 2026 18:08

chore: bump OH version and add a fixed issue

9388e2b

mintlify Bot deployed to staging - docs July 1, 2026 19:47 View deployment

docs: copyedit

71d9a90

StephenHinck reviewed Jul 1, 2026

View reviewed changes

mintlify Bot deployed to staging - docs July 1, 2026 20:06 View deployment

Apply suggestions from code review

dd110ad

Co-authored-by: Stephen Hinck <shinck@specterops.io>

mintlify Bot deployed to staging - docs July 1, 2026 20:09 View deployment

docs: copyedit

4b4c24d

mintlify Bot deployed to staging - docs July 1, 2026 20:10 View deployment

zaton-netizen approved these changes Jul 1, 2026

View reviewed changes

chore: removed ADCS ESC14 edges from release notes

2036c58

mintlify Bot deployed to staging - docs July 6, 2026 13:31 View deployment

chore: added openhound highlight for v9.4.0

8f9a237

jeff-matthews requested a review from StephenHinck July 6, 2026 13:56

mintlify Bot deployed to staging - docs July 6, 2026 13:56 View deployment

slokie-so approved these changes Jul 6, 2026

View reviewed changes

jeff-matthews merged commit 7acdd76 into release/v9.4.0 Jul 6, 2026
3 checks passed

jeff-matthews deleted the BP-2735-release-notes branch July 6, 2026 19:29

github-actions Bot locked and limited conversation to collaborators Jul 6, 2026


		This release expands ADCS attack path coverage, opens more administration workflows to auditors in read-only mode, and improves OpenHound collection resilience. Key highlights include:

		- New edges: Model ADCS ESC14 Scenario A attack paths with new certificate-mapping edge coverage.

Uh oh!

Conversation

jeff-matthews commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Purpose

Staging

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

jeff-matthews Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

jeff-matthews Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

StephenHinck left a comment

Choose a reason for hiding this comment

Uh oh!

jeff-matthews commented Jul 1, 2026

Uh oh!

coderabbitai Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

StephenHinck left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

zaton-netizen left a comment

Choose a reason for hiding this comment

Uh oh!

slokie-so left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

jeff-matthews commented Jun 30, 2026 •

edited

Loading

coderabbitai Bot commented Jun 30, 2026 •

edited

Loading

jeff-matthews Jun 30, 2026 •

edited

Loading

jeff-matthews Jun 30, 2026 •

edited

Loading

coderabbitai Bot commented Jul 1, 2026 •

edited

Loading