BloodHound icon indicating copy to clipboard operation
BloodHound copied to clipboard

SharpHound v4.1 highvalue property not set on all nodes

Open idnahacks opened this issue 3 years ago • 1 comments

The highvalue property is only being set on nodes that are classed as highvalue in the latest version. Previous versions set the property almost everywhere, with a true or false value.

idnahacks avatar Feb 10 '22 20:02 idnahacks

Also noticing some built-in groups that were classified as High Value Targets in previous versions are no longer labeled High Value, ie Account Operators, Remote Desktop Users and Print Operators.

Workaround for previous users comment involves some custom cypher:

MATCH (n) WHERE NOT EXISTS(n.highvalue) SET n.highvalue = false RETURN n.name, n.highvalue

lucasni2 avatar Feb 16 '22 03:02 lucasni2