You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+3-11Lines changed: 3 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -77,7 +77,7 @@ Enter the database credentials and establish a connection. It is the same creden
77
77
ImproHound creates a ‘TierX’ label on nodes in the BloodHound database. If you have used ImproHound before with this BloodHound database, you will be asked if you want to continue with the tiering you have already created or if you want to start over.
This is the page where you will categorize the AD objects into tiers. The window displays the OU structure. Each AD object has a tier value which can be increased and decreased with the arrows.
83
83
@@ -93,14 +93,10 @@ If you select a group, you can click ‘Set children to tier’ to set all membe
93
93
94
94
If you click ‘Set tier for GPOs’ each GPO will have their tier level set to the tier level of the OU with highest tier (closest to zero) which the GPO is linked to. GPOs not linked to an OU will not have their tier level changed.
95
95
96
-
The tier levels will be saved in the BloodHound first, if not already done.
97
-
98
96
**Get tiering violations**
99
97
100
98
Find all relations in the BloodHound database where an AD object has control of an AD object from a higher tier (closer to zero).
101
99
102
-
The tier levels will be saved in the BloodHound first, if not already done.
103
-
104
100
Two CSV files are generated as output:
105
101
106
102
* adobjects-[timestamp].csv: All AD objects and which tier they are in.
@@ -121,13 +117,9 @@ You can look up all the relation types and how they are exploited [here](https:/
121
117
122
118
If you discover that an object is in a too high tier (closest to zero), you should correct it in ImproHound, and then check for violations with this object as SOURCE. If an object is in a too low tier (closest to infinity), you should correct it in ImproHound and check for violations with the object as TARGET.
123
119
124
-
**Reset**
125
-
126
-
All tier levels will be set to 1 in ImproHound. All ‘TierX’ labels in the BloodHound database will be removed.
127
-
128
-
**Save**
120
+
**Delete tiering**
129
121
130
-
Save the tier levels as a ‘TierX’ label in the BloodHound database.
122
+
All tier labels and ImproHound created nodes in the BloodHound database will be deleted.
0 commit comments