> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bytejmp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Collectors

> Data collection commands for SharpHound (Windows) and BloodHound.py (Linux).

## SharpHound

Collect all data from current domain.

```powershell theme={"dark"}
.\SharpHound.exe -c All
```

Collect all data targeting a specific domain.

```powershell theme={"dark"}
.\SharpHound.exe -c All --Domain domain.local --DomainController 10.10.10.1
```

Collect with explicit credentials.

```powershell theme={"dark"}
.\SharpHound.exe -c All --LdapUsername user --LdapPassword 'P@ssw0rd' --Domain domain.local
```

DC-only collection (faster, less noise).

```powershell theme={"dark"}
.\SharpHound.exe -c DCOnly
```

Stealth collection (reduced network noise).

```powershell theme={"dark"}
.\SharpHound.exe -c All --Stealth
```

Custom output path and randomized filenames.

```powershell theme={"dark"}
.\SharpHound.exe -c All --OutputDirectory C:\Temp --RandomFilenames --MemCache
```

Custom zip filename.

```powershell theme={"dark"}
.\SharpHound.exe -c All --ZipFileName loot.zip
```

Loop collection for 2 hours every 5 minutes.

```powershell theme={"dark"}
.\SharpHound.exe -c All --Loop --LoopDuration 02:00:00 --LoopInterval 00:05:00
```

Exclude domain controllers from host enumeration.

```powershell theme={"dark"}
.\SharpHound.exe -c All --ExcludeDCs
```

***

## BloodHound.py

Collect all data with password auth.

```bash theme={"dark"}
bloodhound-python -u user -p 'P@ssw0rd' -d domain.local -c All -ns 10.10.10.1
```

Collect and zip output automatically.

```bash theme={"dark"}
bloodhound-python -u user -p 'P@ssw0rd' -d domain.local -c All -ns 10.10.10.1 --zip
```

Pass-the-Hash (PTH) authentication.

```bash theme={"dark"}
bloodhound-python -u user --hashes LMHASH:NTHASH -d domain.local -c All -ns 10.10.10.1
```

Kerberos authentication.

```bash theme={"dark"}
bloodhound-python -u user -p 'P@ssw0rd' -d domain.local -c All -ns 10.10.10.1 -k
```

DC-only collection.

```bash theme={"dark"}
bloodhound-python -u user -p 'P@ssw0rd' -d domain.local -c DCOnly -ns 10.10.10.1
```

Target a specific domain controller.

```bash theme={"dark"}
bloodhound-python -u user -p 'P@ssw0rd' -d domain.local -c All -ns 10.10.10.1 -dc dc01.domain.local
```

Force NTLM authentication.

```bash theme={"dark"}
bloodhound-python -u user -p 'P@ssw0rd' -d domain.local -c All -ns 10.10.10.1 --auth-method ntlm
```

***

## References

* [SharpHound — Usage Flags](https://support.bloodhoundenterprise.io/hc/en-us/articles/17481394564251-SharpHound-Community-Edition-Flags)
* [SharpHound — GitHub](https://github.com/BloodHoundAD/SharpHound)
* [BloodHound.py — GitHub](https://github.com/dirkjanm/BloodHound.py)