specterops/openhound-jamf

OpenHound Jamf is a tool that pulls device and configuration data from Jamf Pro, a popular management platform for Apple devices in corporate environments, and shapes it into a format that BloodHound can understand. BloodHound, made by SpecterOps, is a security tool that maps out relationships in a network so defenders can spot paths an attacker might take to escalate privileges or reach sensitive systems. This connector extends that visibility to Macs, iPhones, and iPads managed by Jamf. At a high level, the tool collects resources from Jamf Pro (things like enrolled devices, configuration profiles, and user assignments) and converts them into "nodes and edges", essentially dots and connecting lines that represent entities and their relationships. OpenHound, the broader framework this tool plugs into, standardizes that collection-and-conversion process so data from different sources can all flow into BloodHound's graph in a consistent way. The people who would use this are security teams and IT administrators who already rely on BloodHound for mapping attack paths and also use Jamf to manage their Apple fleet. For example, if a company wants to understand whether a compromised Mac could give an attacker a path to broader network resources, this connector feeds the Jamf-side data into BloodHound so those relationships become visible alongside everything else in the graph. The project is built in Python and runs on Python 3.13. It leverages a data pipeline library called DLT (Data Load Tool) to handle the mechanics of collecting and moving the data. Beyond that, the README is fairly sparse, it directs readers to OpenHound's external documentation for setup and usage details rather than walking through them itself.