SpecterOps
Show Cypher Queries for extended Node information (Member Of, Outbound Control...) - "Query debug mode"
Feature Description:
When clicking on information about a node, e.g. "Outbound Control", a graph is rendered with this information. In Legacy BloodHound the query used to gather this information was shown in the raw query field.
This can be useful if you want to have a base query, you can start to edit to your own needs.
Current Behavior:
The graph is created but the used Cypher query is lost.
Desired Behavior:
When clicking on node information that provide a graph, e.g. "Inbound Control", "Outbound Control", "Member Of" or "Execution Privileges", the executed query should be shown in the query editor.
Use Case:
When analyzing data, I often start with a base query from the UI and extend or limit the information that the query returns, based on my needs. For a quicker workflow it is convenient to be able to edit an existing query.
We currently have a version of this in our backlog. This ask is complicated because we no longer use raw cypher underneath the hood for a significant chunk of the application, including the entity panels. We're exploring some options in opengraph to make this information accessible again as one of our current ongoing initiatives.
