Skip to content

Commit fd1bd87

Browse files
author
ADNinja
committed
Update README.md with Delete Tiering button
1 parent 474cc9a commit fd1bd87

File tree

3 files changed

+3
-11
lines changed

3 files changed

+3
-11
lines changed

README.md

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ Enter the database credentials and establish a connection. It is the same creden
7777
ImproHound creates a ‘TierX’ label on nodes in the BloodHound database. If you have used ImproHound before with this BloodHound database, you will be asked if you want to continue with the tiering you have already created or if you want to start over.
7878

7979
### OU structure
80-
![alt text](https://github.com/improsec/ImproHound/blob/master/readme-images/03-ou-structure.png?raw=true)
80+
![alt text](https://github.com/improsec/ImproHound/blob/master/readme-images/03-ou-structure-v1_1.png?raw=true)
8181

8282
This is the page where you will categorize the AD objects into tiers. The window displays the OU structure. Each AD object has a tier value which can be increased and decreased with the arrows.
8383

@@ -93,14 +93,10 @@ If you select a group, you can click ‘Set children to tier’ to set all membe
9393

9494
If you click ‘Set tier for GPOs’ each GPO will have their tier level set to the tier level of the OU with highest tier (closest to zero) which the GPO is linked to. GPOs not linked to an OU will not have their tier level changed.
9595

96-
The tier levels will be saved in the BloodHound first, if not already done.
97-
9896
**Get tiering violations**
9997

10098
Find all relations in the BloodHound database where an AD object has control of an AD object from a higher tier (closer to zero).
10199

102-
The tier levels will be saved in the BloodHound first, if not already done.
103-
104100
Two CSV files are generated as output:
105101

106102
* adobjects-[timestamp].csv: All AD objects and which tier they are in.
@@ -121,13 +117,9 @@ You can look up all the relation types and how they are exploited [here](https:/
121117

122118
If you discover that an object is in a too high tier (closest to zero), you should correct it in ImproHound, and then check for violations with this object as SOURCE. If an object is in a too low tier (closest to infinity), you should correct it in ImproHound and check for violations with the object as TARGET.
123119

124-
**Reset**
125-
126-
All tier levels will be set to 1 in ImproHound. All ‘TierX’ labels in the BloodHound database will be removed.
127-
128-
**Save**
120+
**Delete tiering**
129121

130-
Save the tier levels as a ‘TierX’ label in the BloodHound database.
122+
All tier labels and ImproHound created nodes in the BloodHound database will be deleted.
131123

132124

133125
## Guidelines for tiering AD objects
16.5 KB
Loading

readme-images/03-ou-structure.png

-23.1 KB
Binary file not shown.

0 commit comments

Comments
 (0)