https://cybertoolchain.io/tools/azurehound New releases and features in azurehound, tracked by The Cyber Toolchain. en Tue, 08 Sep 2026 14:42:08 GMT https://github.com/SpecterOps/AzureHound/releases/tag/v3.1.1 https://github.com/SpecterOps/AzureHound/releases/tag/v3.1.1 Tue, 08 Sep 2026 14:42:08 GMT AzureHound gains log rotation and management flags for persistent, size-bounded log file collection. • Adds `--log-file` flag to write logs to a file, with automatic rotation when the active log reaches `--log-max-size` MiB (default: 100 MiB); rotated logs are timestamped and stored beside the active log. • Adds `--log-compress` flag to gzip-compress rotated log archives (default: true). • Adds `--log-max-age` flag to prune rotated log archives older than a given number of days (default: 14; set to 0 to disable age pruning). • Adds `--log-max-backups` flag to cap the number of retained rotated log archives (default: 20; set to 0 to disable count pruning). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.10.0 https://github.com/SpecterOps/AzureHound/releases/tag/v2.10.0 Mon, 02 Mar 2026 15:33:29 GMT AzureHound v2.10.0 adds collection of federated identity credentials for Azure AD applications. • Collects federated identity credentials from Azure AD applications, expanding attack-path visibility into workload identity federation configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.9.0 https://github.com/SpecterOps/AzureHound/releases/tag/v2.9.0 Thu, 29 Jan 2026 17:52:09 GMT AzureHound v2.9.0 adds custom User-Agent flag, Jira transfer support, and Entra ID last logon timestamps. • Adds a global `--user-agent` flag to customize the HTTP User-Agent string sent during collection. • Adds Jira transfer capability, enabling collected data to be sent directly to a Jira destination. • Collects Entra ID User Last Logon Timestamp as a property on AZUser nodes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.5.0 https://github.com/SpecterOps/AzureHound/releases/tag/v2.5.0 Fri, 30 May 2025 19:51:14 GMT AzureHound v2.5.0 adds collection of unified role eligibility schedule instances and a new list role-assignment-policies command. • Collects unified role eligibility schedule instances, improving visibility into PIM-eligible role assignments in Azure AD. • New `list role-assignment-policies` command surfaces role assignment policy configurations for Azure RBAC roles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.4.1 https://github.com/SpecterOps/AzureHound/releases/tag/v2.4.1 Wed, 30 Apr 2025 14:29:03 GMT AzureHound v2.4.1 adds new graph kinds for ingesting PIM (Privileged Identity Management) role data. • Adds new graph Kinds to support ingestion of Azure Privileged Identity Management (PIM) role assignments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.4.0 https://github.com/SpecterOps/AzureHound/releases/tag/v2.4.0 Mon, 28 Apr 2025 19:03:19 GMT AzureHound v2.4.0 adds data models for Privileged Identity Management (PIM) Assignments. • Adds new data models for PIM (Privileged Identity Management) Assignments, enabling collection of Azure PIM role assignment data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.3.0 https://github.com/SpecterOps/AzureHound/releases/tag/v2.3.0 Thu, 27 Feb 2025 19:39:47 GMT AzureHound v2.3.0 adds Managed Identity authentication and Azure CLI credential reuse • Supports Managed Identity authentication for agentless, credential-free Azure enumeration in cloud-hosted environments. • Enables reuse of existing Azure CLI authentication sessions, removing the need to supply separate credentials. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.1.1 https://github.com/SpecterOps/AzureHound/releases/tag/v2.1.1 Wed, 11 Oct 2023 20:59:57 GMT Adds pprof profiling output for performance analysis • Adds `--pprof` flag to dump performance profiles to stderr Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v2.0.0 https://github.com/SpecterOps/AzureHound/releases/tag/v2.0.0 Wed, 05 Apr 2023 19:52:22 GMT AzureHound v2.0.0 adds new node types and renames workflows to logic apps • `feat: Add collection of several new node types` allows AzureHound to collect data for additional Azure resource types beyond the previous set. • Renaming `workflows` to `logic apps` in collected objects updates the object naming convention for Azure Functions logic app resources. Breaking changes: • Objects previously labeled `workflows` are now labeled `logic apps`, which may break queries relying on the old object type name. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound https://github.com/SpecterOps/AzureHound/releases/tag/v1.2.0 https://github.com/SpecterOps/AzureHound/releases/tag/v1.2.0 Wed, 28 Sep 2022 19:24:02 GMT AzureHound v1.2.0 adds ingestion of AppRoleAssignments, KVContributors, automation accounts, function apps, logic apps, and storage accounts. • Adds `AppRoleAssignments` capture to the data model for principal-role mappings. • Adds `KVContributors` capture for Key Vault access control relationships. • Expands supported cloud resources to include automation accounts, function apps, logic apps (workflows), and storage accounts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/azurehound