Privilege Zone Rules

The following Privilege Zone rules can be imported into BloodHound to group nodes for Cypher query analysis and BloodHound Enterprise finding generation.

This file is automatically generated from the JSON Privilege Zone rule files.

Tenant

Tenant nodes in Jamf Pro. Zone: Tier Zero

MATCH (n:jamf_Tenant)
RETURN n

This rule is defined in the tenant.json file.

Tier Zero Principals

Accounts and group principals with ‘Full Access’ administrator privileges in the tenant and ‘SSO’ configuration if enabled. Zone: Tier Zero

MATCH (n)
WHERE n.tier = 0
RETURN n

This rule is defined in the tier0-principals.json file.

Get Started with BloodHound

Install a Data Collector

Collect Data

OpenGraph

OpenHound

Analyze Attack Path Data

Manage BloodHound

API & Integrations

Resources

Privilege Zone Rules

Tenant

Tier Zero Principals

​Tenant

​Tier Zero Principals

Tenant

Tier Zero Principals