The Privileged Objects list displays all of the Privileged objects that have been collected by the Privileged objects provider (Security Guardian or BloodHound Enterprise) as well as any that have been manually-added by users.

NOTE: If BloodHound Enterprise is configured and you see the message No New Privileged Objects, check the BloodHound Enterprise Configuration Status from within On Demand Audit. Review the configuration connection message details to determine whether the connection to SpecterOps has been successful. Review the Last Configuration Received, Next Configuration Synchronization, and the status of the configuration.

 

To access the Privileged Objects list:

From the On Demand left navigation menu, choose Security | Privileged Objects. The following information displays for each Privileged object:

• Display Name

• Principal Name

• Tenant

• Object Type

• Date Added

  NOTE: This field displays the signed-in user's local date and time.

• Added By (Security Guardian, BloodHound Enterprise, or User)

• Certification Status

NOTE: If you click the Filter button, you can filter displayed results by any one of these criteria.

From the Privileged Objects list, you can:

• view an object's details

• export the list to a .csv file

• add objects manually

• remove objects that have been added manually

• certify objects