Privilege Zone Rules

Jamf extension Privilege Zone rules

The following Privilege Zone rules can be imported into BloodHound to group nodes for Cypher query analysis and BloodHound Enterprise finding generation.

This file is automatically generated from the JSON Privilege Zone rule files.

Tenant

Tenant nodes in Jamf Pro.

Zone: Tier Zero

MATCH (n:jamf_Tenant)
RETURN n

This rule is defined in the tenant.json file.

Tier Zero Principals

Accounts and group principals with ‘Full Access’ administrator privileges in the tenant and ‘SSO’ configuration if enabled.

Zone: Tier Zero

MATCH (n)
WHERE n.tier = 0
RETURN n

This rule is defined in the tier0-principals.json file.