> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Labels

> Learn how to use labels to categorize and manage objects within Privilege Zones for better organization.

export const tab_1 = "label"

export const tab_0 = "Labels"

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

Labels let you tag groups of objects for easier searching and filtering. For example, you can label compromised assets with the default **Owned** label to quickly identify attack paths from non-compromised to compromised assets in your environment.

The **Owned** label represents objects that have been compromised in your environment. You can tag objects with the **Owned** label using rules or manually in the graph.

<Note>Unlike zones, BloodHound does not use labels in risk analysis—they're designed to help you organize and query your data.</Note>

The **{tab_0}** tab provides different views depending on which edition of BloodHound you're using. The **Summary View** is available in BloodHound Enterprise only, while the **Details View** is available in both BloodHound Enterprise and BloodHound Community Edition.

<Tabs>
  <Tab title="Summary View">
    The **Summary View** shows label names, rule counts, and object counts.

    <img src="https://mintcdn.com/specterops/P76QMmb9gkQIWH8z/images/privzones/labels-summary-view.png?fit=max&auto=format&n=P76QMmb9gkQIWH8z&q=85&s=571addd3fba49c160c9ae61afef03d09" alt="A view of the Zone Builder labels summary view" width="2786" height="934" data-path="images/privzones/labels-summary-view.png" />
  </Tab>

  <Tab title="Details View">
    The **Details View** displays all rules configured for the selected label and the objects that they pull into the label (organized by node type). Use the dropdown menus to filter the view by specific zones, identity providers, and services in your network environment.

    Select a rule or object to display more details in the right panel, including:

    * Rule definition and Cypher query
    * Object properties and relationships

    <Note>BloodHound displays objects for enabled rules only. To view objects related to a disabled rule, you must re-enable it.</Note>

    <Frame>
      <img src="https://mintcdn.com/specterops/P76QMmb9gkQIWH8z/images/privzones/labels-detail-view.png?fit=max&auto=format&n=P76QMmb9gkQIWH8z&q=85&s=cfe6b2ad074b0f238e6d819c04fcc0e9" alt="A view of the Zone Builder labels detail view" width="2786" height="864" data-path="images/privzones/labels-detail-view.png" />
    </Frame>
  </Tab>
</Tabs>

### Create a label

<Badge shape="rounded" size="sm" stroke color="purple">Enterprise Edition</Badge>

You can create custom labels to categorize objects based on any criteria relevant to your environment, such as business function, sensitivity level, or compliance requirements.

For example, you might create a label for PCI-scoped systems to quickly identify attack paths from non-PCI to PCI environments.

Creating a label involves configuring the label details and defining a rule.

<Steps>
  <Step title="Open the Zone Builder page">
    In the left menu, click **Privilege Zones** > **Labels** > **Create Label**.
  </Step>

  <Step title="Configure initial label details">
    Enter all relevant information about the label:

    | Field       | Required? | Description                                                             |
    | ----------- | :-------: | ----------------------------------------------------------------------- |
    | Name        |    Yes    | A unique name for the label (e.g., PCI)                                 |
    | Description |     No    | A brief description of the label's purpose and scope (e.g., PCI assets) |

    <img src="https://mintcdn.com/specterops/P76QMmb9gkQIWH8z/images/privzones/create-label.png?fit=max&auto=format&n=P76QMmb9gkQIWH8z&q=85&s=a6cde9362c57193ba749da0dc78f30ee" alt="A view of the Zone Builder create label page" style={{ width:"70%" }} width="1326" height="604" data-path="images/privzones/create-label.png" />
  </Step>

  <Step title="Define a rule">
    Click **Define Rule** to save your new label and continue on to define the objects to include in the label.

    <Warning>See [Rules](/analyze-data/privilege-zones/rules) for more detailed information about defining rules. The content in this section provides a high-level overview only.</Warning>

    When defining a rule during the label creation process, provide the following information:

    | Field       | Required? | Description                                                            |
    | ----------- | :-------: | ---------------------------------------------------------------------- |
    | Name        |    Yes    | A unique name for the rule (e.g., PCI)                                 |
    | Description |     No    | A brief description of the rule's purpose and scope (e.g., PCI assets) |
    | Rule Type   |    Yes    | The type of rule to use (e.g., Object ID or Cypher)                    |

    <img src="https://mintcdn.com/specterops/jq53of6QZwi2e41u/images/privzones/define-label-rule.png?fit=max&auto=format&n=jq53of6QZwi2e41u&q=85&s=ec3d518604f2e9810100fd0e747aeb4c" alt="A view of the Zone Builder define label rule page" style={{ width:"100%" }} width="2778" height="1364" data-path="images/privzones/define-label-rule.png" />
  </Step>

  <Step title="Complete label creation">
    Click **Save** to finish creating the label.
  </Step>
</Steps>

### Edit a label

To edit a label, follow these steps:

<Steps>
  <Step title="Select a label">
    1. In the left menu, click **Privilege Zones**.

    2. Click the **Labels** tab

    3. By default, the **Owned** label is pre-selected. To edit a different label, select the label you want to edit.

       If you're using BloodHound Enterprise, you can select a label from the **Summary View**.

           <img src="https://mintcdn.com/specterops/P76QMmb9gkQIWH8z/images/privzones/edit-label-summary-view.png?fit=max&auto=format&n=P76QMmb9gkQIWH8z&q=85&s=d5d2ba6150e9a8bb4375d9b51412fbed" alt="A view of the Zone Builder edit label page in BloodHound Enterprise with the Summary View" width="1728" height="610" data-path="images/privzones/edit-label-summary-view.png" />

       Alternatively, BloodHound Enterprise and BloodHound Community Edition users can select a label using the dropdown menu on the **Details View**.

           <img src="https://mintcdn.com/specterops/P76QMmb9gkQIWH8z/images/privzones/edit-label-details-view.png?fit=max&auto=format&n=P76QMmb9gkQIWH8z&q=85&s=e4f7a35dd8ea82e4d6a3eca9a974c58c" alt="A view of the Zone Builder edit label page in BloodHound with the Detail View" width="1888" height="712" data-path="images/privzones/edit-label-details-view.png" />

    4. Click **Edit Label**.
  </Step>

  <Step title="Edit the label">
    To edit the label:

    1. Modify the label's name or description.
    2. Click **Save Edits** to apply your changes.

    <Tip>To manage how objects are included in the label, see [Rules](/analyze-data/privilege-zones/rules).</Tip>
  </Step>
</Steps>

### Delete a label

<Badge shape="rounded" size="sm" stroke color="purple">Enterprise Edition</Badge>

You cannot delete the default **Owned** label, but you can edit its description and rules.

<Warning>Deleting a {tab_1} is irreversible.</Warning>

To delete an existing label, follow these steps:

<Steps>
  <Step title="Select a label">
    Navigate to the **Labels** tab, select the label you want to delete, and click **Edit Label**.
  </Step>

  <Step title="Delete the label">
    To delete the label:

    1. Click <Icon icon="trash-can" /> **Delete Label** at the top of the page.

    2. Confirm your action in the dialog.

           <img src="https://mintcdn.com/specterops/P76QMmb9gkQIWH8z/images/privzones/confirm-label-delete.png?fit=max&auto=format&n=P76QMmb9gkQIWH8z&q=85&s=5bded601ed049df99e5d735275fab9ec" alt="A view of the Zone Builder confirm label delete dialog" style={{ width:"70%" }} width="589" height="297" data-path="images/privzones/confirm-label-delete.png" />

    3. Click **Confirm** to delete the label.
  </Step>
</Steps>
