Return
-
Title
Objects from the parent domain missing from the Tier Zero Objects list when using BloodHound Enterprise -
Description
After first configuring Security Guardian with SpecterOps BloodHound Enterprise as the Tier Zero collector or previously configuring Security Guardian with SpecterOps BloodHound Enterprise as the Tier Zero collector and upgrading the SharpHound agent, Tier Zero objects from the parent domain are missing from the Tier Zero Objects list. -
Cause
There is an issue with some SharpHound versions that fail when performing a cross-trust collection. -
Resolution
The issue is being investigated by SpecterOps.
WORKAROUND 1:
Deploy a SharpHound collector & service account in the parent domain
WORKAROUND 2:
Downgrade the SharpHound collector to version 2.1.7.