Objects from the parent domain missing from the Tier Zero Objects list when using BloodHound Enterprise
説明
After first configuring Security Guardian with SpecterOps BloodHound Enterprise as the Tier Zero collector or previously configuring Security Guardian with SpecterOps BloodHound Enterprise as the Tier Zero collector and upgrading the SharpHound agent, Tier Zero objects from the parent domain are missing from the Tier Zero Objects list.
原因
There is an issue with some SharpHound versions that fail when performing a cross-trust collection.
対策
The issue is being investigated by SpecterOps.
WORKAROUND 1: Deploy a SharpHound collector & service account in the parent domain
WORKAROUND 2: Downgrade the SharpHound collector to version 2.1.7.