The Tier Zero Objects list displays all of the Tier Zero objects that have been collected by the Tier Zero provider (Security Guardian or BloodHound Enterprise) as well as any that have been manually-added by users.

NOTE: If BloodHound Enterprise is configured and you see the message No New Tier Zero Objects, check the BloodHound Enterprise configuration within On Demand Audit. Review the configuration connection message details to determine whether the connection to SpecterOps has been successful. Review the Last Configuration Received, Next Configuration Synchronization, and the status of the configuration.

 

To access the Tier Zero Objects list:

From the On Demand left navigation menu, choose Security | Tier Zero Objects. The following information is listed for each Tier Zero object:

• Display Name

• Principal Name

• Distinguished Name

• Object Type

• Date Added

  NOTE: This field displays the signed-in user's local date and time.

• Added By (Security Guardian, BloodHound Enterprise or user)

• Certification Status

• Protection Status

NOTE: If you click the Filter button, you can filter displayed results by one or more of the following criteria: Principal Name Distinguished Name Object Type Added By Certification Status Protection Status

From the Tier Zero Objects list, you can:

• view an object's details

• add objects manually

• remove objects that have been added manually

• certify objects

• enable protection