The IssuancePolicy node represents the Active Directory LDAP objects of the msPKI-Enterprise-Oid class located in the OID container in the Configuration Naming Context.
The node supports the properties of the table. Three types of property names will be used, depending on where the property is found:
Entity Panel | Database | Directory | Description |
Object ID | objectid | objectGUID | The object’s unique identifier in the directory. |
ACL Inheritance Denied | isaclprotected | nTSecurityDescriptor | Whether inherited permissions (ACEs) from containers are blocked on this object. |
Certificate Template OID | certtemplateoid | msPKI-Cert-Template-OID | The OID string used in certificate templates to reference this issuance policy. |
Created | whencreated | whenCreated | When the object was created in the directory. |
Distinguished Name | distinguishedname | distinguishedName | The name of the object and it’s location in AD. |
Domain FQDN | domain | - | The fully qualified domain name (FQDN) of the domain the object belongs to. |
Domain SID | domainsid | - | The SID of the domain the object belongs to. |
Last Collected by BloodHound | lastcollected | - | The most recent time the object was collected and ingested in BloodHound. |
Last Seen by BloodHound | lastseen | - | The most recent time the object or a reference to it was collected and ingested in BloodHound. |
- | name | name + domain name | Name of the object + @ + the name of the domain. |
The following edge types may be linked to/from this node. See the edges documentation for more information on the edge types.
Edge type | Entity panel category |
GenericAll | Inbound Object Control |
GenericWrite | Inbound Object Control |
Owns | Inbound Object Control |
WriteDacl | Inbound Object Control |
WriteOwner | Inbound Object Control |
ExtendedByPolicy | Certificate Templates with Extension |
Edge type | Entity panel category |
OIDGroupLink | OID Group Link |
The IssuancePolicy node represents the Active Directory LDAP objects of the msPKI-Enterprise-Oid class located in the OID container in the Configuration Naming Context.
The node supports the properties of the table. Three types of property names will be used, depending on where the property is found:
Entity Panel | Database | Directory | Description |
Object ID | objectid | objectGUID | The object’s unique identifier in the directory. |
ACL Inheritance Denied | isaclprotected | nTSecurityDescriptor | Whether inherited permissions (ACEs) from containers are blocked on this object. |
Certificate Template OID | certtemplateoid | msPKI-Cert-Template-OID | The OID string used in certificate templates to reference this issuance policy. |
Created | whencreated | whenCreated | When the object was created in the directory. |
Distinguished Name | distinguishedname | distinguishedName | The name of the object and it’s location in AD. |
Domain FQDN | domain | - | The fully qualified domain name (FQDN) of the domain the object belongs to. |
Domain SID | domainsid | - | The SID of the domain the object belongs to. |
Last Collected by BloodHound | lastcollected | - | The most recent time the object was collected and ingested in BloodHound. |
Last Seen by BloodHound | lastseen | - | The most recent time the object or a reference to it was collected and ingested in BloodHound. |
- | name | name + domain name | Name of the object + @ + the name of the domain. |
The following edge types may be linked to/from this node. See the edges documentation for more information on the edge types.
Edge type | Entity panel category |
GenericAll | Inbound Object Control |
GenericWrite | Inbound Object Control |
Owns | Inbound Object Control |
WriteDacl | Inbound Object Control |
WriteOwner | Inbound Object Control |
ExtendedByPolicy | Certificate Templates with Extension |
Edge type | Entity panel category |
OIDGroupLink | OID Group Link |