Representation
The Zone node is a synthetic node that represents a privilege zone in the BloodHound Enterprise graph. It does not represent an object collected from an environment. BloodHound Enterprise creates one Zone node for each privilege-zone asset group tag during analysis and connects the zone’s members to it withMemberOfZone relationships.
BloodHound Enterprise uses Zone nodes to measure the shortest path from a finding’s target principal to Tier Zero for Findings Prioritization. You can also use the nodes as destinations in Cypher queries.
Zone nodes are generated when Findings Prioritization is enabled. Disabling the feature removes the Zone nodes and their
MemberOfZone relationships during the next analysis run.Node properties
The following properties identify the represented privilege zone and its source asset group tag.Edges
Zone nodes useMemberOfZone relationships to connect each current zone member to the synthetic zone representation.