CiliumHound — an OpenGraph extension for BloodHound for auditing Cilium network policies

The tool takes a folder containing policies in JSON or YAML format and creates a graph spanning a Kubernetes namespace.

Features:
• Merges policies for a selected namespace into a single graph with nodes representing Kubernetes objects, entities, services, and Cilium rules.
• Displays incoming and outgoing network connections based on IP ranges (CIDR), domain names (FQDN), Kubernetes labels, ports, and protocols in use.
• Generates a BloodHound OpenGraph JSON file for subsequent import into BloodHound.
• Includes a helper script for loading the graph, icons, and Cypher queries into BloodHound.
• Provides a set of saved Cypher queries for analyzing a namespace and discovering network paths.

Tool: [https://github.com/Sw4mpf0x/CiliumHound](https://github.com/Sw4mpf0x/CiliumHound)

CiliumHound is an OpenGraph extension for BloodHound that audits Cilium network policies, merging namespace policies into a graph and generating BloodHound import files and Cypher queries.