Domain - SpecterOps

Node properties

The node supports the properties of the table below.

Properties which are blank/null will not be shown in the Entity Panel.


Entity Panel name	Description
Tier Zero / High Value	BloodHound Enterprise: Whether the object is part of Tier Zero of the Microsoft’s Active Directory Tier Model, or the Control Plane of Microsoft’s Enterprise Access Model. BloodHound CE: Whether the object is currently marked as High Value. By default any object that belongs to Tier Zero is marked as High Value.
Display Name	The display name for the object.
Object ID	The object’s security identifier (SID), a unique identifier in the directory.
ACL Inheritance Denied	Identifies whether an object is allowing ACL inheritance to itself.
Created	The time when the object was created in the directory.
Description	The contents of the `description` field for the object.
Functional Level	The functional level of the Active Directory domain. This becomes particularly relevant in certain attack scenarios, such as resource-based constrained delegation.

References

https://learn.microsoft.com/en-us/windows/win32/adschema/c-domain