--- title: What Comes Before Tickets | daily.dev description: A personal essay from an engineer at SpecterOps recounting a year spent building OpenGraph, the new extensibility foundation for the Active Directory security... canonical: https://daily.dev/posts/what-comes-before-tickets-eyus8mjvi twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: What Comes Before Tickets | daily.dev og:description: A personal essay from an engineer at SpecterOps recounting a year spent building OpenGraph, the new extensibility foundation for the Active Directory security... og:url: https://daily.dev/posts/what-comes-before-tickets-eyus8mjvi og:image: https://api.daily.dev/og/posts/EYuS8MJvI.png og:image:alt: What Comes Before Tickets og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # What Comes Before Tickets **[SpecterOps](https://daily.dev/sources/specterops)** · 26 min read · 0 upvotes · 0 comments ## Summary A personal essay from an engineer at SpecterOps recounting a year spent building OpenGraph, the new extensibility foundation for the Active Directory security tool BloodHound. The piece traces the engineer's growth from ticket-taker to architecture owner, describing the design of a generic graph ingestion contract, the challenge of extending BloodHound's analysis engine beyond Active Directory to arbitrary identity graphs (including hybrid cross-platform relationships), and the interpersonal and career lessons learned along the way, including advice from a director about deciding what to work on rather than chasing why. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [SpecterOps Launches BloodHound Scentry](https://daily.dev/posts/specterops-launches-bloodhound-scentry-elqgilq7f) · Dark Reading · 0 upvotes · 0 comments - [A Practical Approach To Graphing The Planet](https://daily.dev/posts/a-practical-approach-to-graphing-the-planet-cp6seja41) · InfoSec Write-ups · 0 upvotes · 0 comments - [AWSHound: An OpenSource AWS OpenGraph Collector](https://daily.dev/posts/awshound-an-opensource-aws-opengraph-collector-nvxm1hffc) · SpecterOps · 1 upvotes · 0 comments - [Switchboards to Subgraphs: Building a Triage Agent on a Neo4j Knowledge Graph](https://daily.dev/posts/switchboards-to-subgraphs-building-a-triage-agent-on-a-neo4j-knowledge-graph-uxp8ttnvh) · neo4j · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#career](https://daily.dev/tags/career), [#architecture](https://daily.dev/tags/architecture) [View this post on daily.dev](https://daily.dev/posts/what-comes-before-tickets-eyus8mjvi) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"What Comes Before Tickets","url":"https://daily.dev/posts/what-comes-before-tickets-eyus8mjvi","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/what-comes-before-tickets-eyus8mjvi"},"datePublished":"2026-08-23T12:16:28.497Z","dateModified":"2026-08-23T12:16:48.821Z","description":"A personal essay from an engineer at SpecterOps recounting a year spent building OpenGraph, the new extensibility foundation for the Active Directory security...","image":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","thumbnailUrl":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","isAccessibleForFree":true,"articleSection":"SpecterOps","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"SpecterOps","logo":"https://media.daily.dev/image/upload/s--lR36Z4gn--/f_auto,q_auto/v1787487384/logos/specterops?_a=BAMAMicg0","url":"https://daily.dev/sources/specterops"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/what-comes-before-tickets-eyus8mjvi","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,career,architecture","timeRequired":"PT26M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"SpecterOps","item":"https://daily.dev/sources/specterops"},{"@type":"ListItem","position":3,"name":"What Comes Before Tickets"}]} ```