The following table contains an alphabetical list of all indicators that originate from Security Guardian and for protection for Tier Zero objects.
| Indicator | Indicator Type | Severity | Source |
|---|---|---|---|
| New Privileged Entra ID Group Detected | Tier Zero | High | Security Guardian |
| New Privileged Entra ID Role Detected | Tier Zero | Medium | Security Guardian |
| New Privileged Entra ID Service Principal Detected | Tier Zero | Medium | Security Guardian |
| New Privileged Entra ID Tenant Detected | Tier Zero | Medium | Security Guardian |
| New Privileged Entra ID User Detected | Tier Zero | Medium | Security Guardian |
| New Tier Zero Domain detected | Tier Zero | High | Security Guardian |
| New Tier Zero GPO detected | Tier Zero | Medium | Security Guardian |
| New Tier Zero Group detected | Tier Zero | Medium | Security Guardian |
| New Tier Zero Computer detected | Tier Zero | Medium | Security Guardian |
| New Tier Zero User detected | Tier Zero | Medium | Security Guardian |
| Unprotected Tier Zero Domain | Tier Zero | Medium | Protection |
| Unprotected Active Directory Database | Tier Zero | Medium | Protection |
| Unprotected Tier Zero Computer | Tier Zero | Medium | Protection |
| Unprotected Tier Zero Group | Tier Zero | Medium | Protection |
| Unprotected Tier Zero Group Policy | Tier Zero | Medium | Protection |
| Unprotected Tier Zero User | Tier Zero | Medium | Protection |