在非域内机器上运行harphound

This is documented here as well: https://github.com/BloodHoundAD/BloodHound/issues/113 but it took me a while to find this…

If you want to run Sharphound from a PC that is not joined to the target domain, open a command prompt and run:

runas /netonly /user:DOMAIN\USER powershell.exe
Enter the password for DOMAIN\USER:
Attempting to start powershell.exe as user "DOMAIN\USER" ...

Then import Sharpound and run it as normal.

import-module sharphound.ps1
invoke-bloodhound -collectionmethod all -domain TARGETDOMAIN

from:https://www.gerrenmurphy.com/running-sharphound-from-a-non-domain-pc/