Skip to main content
Applies to BloodHound Enterprise only

Representation

The MemberOfZone edge connects a graph node to the synthetic Zone node for the privilege zone that contains it. BloodHound Enterprise generates and reconciles these edges during analysis from current privilege-zone membership. This edge represents zone membership for graph analysis. It is not a collected directory relationship and does not itself represent an abusable privilege.

Edge schema

Source: Any non-synthetic graph node assigned to the privilege zone
Destination: Zone
Traversable: ✅

Use in analysis

BloodHound Enterprise uses MemberOfZone relationships to traverse from the Tier Zero Zone node to its members when calculating a finding target’s proximity to Tier Zero. Use the relationship in Cypher queries when you need to identify the nodes assigned to a privilege zone or query paths to that zone.