Skip to content
Andy Robbins edited this page Aug 6, 2016 · 4 revisions

Clicking on a computer node will populate the Node Info tab with information about that computer:

BloodHound Computer Node Tab

-Node: This is the name of the node, and is in fully qualified format.

-OS: The OS for the computer. This information is not currently gathered by the ingestor.

-Allows Unconstrained Delegation: Whether the computer allows unconstrained delegation. This information is not currently gathered by the ingestor.

-Explicit Admins: These are the explicit users and groups that have local administrator rights on the system. This is the equivalent of running net localgroup administrators on the host.

-Unrolled Admins: These are all of the effective groups and users that have administrator rights on the system. This is the equivalent of running Get-NetLocalGroup -ComputerName computername -Recurse

-First Degree Group Membership: These are the groups that the computer belongs to.

-Unrolled Group Memberships: These are all of the effective group memberships the computer has.

-Sessions: These are the user sessions on the computer the ingestor identified during data collection.