Attack Relations

Attack relations are unidirectional from a source node to a target node. Since relations are transitive, attackers can chain them together to create an "attack path."

Tenable One Identity Exposure has the following attack relations:

• Add Member

• Allowed To Act

• Allowed To Delegate

• Belongs To GPO

• DCSync

• Grant Allowed To Act

• Has SID History

• Implicit Takeover

• Inherit GPO

• Linked GPO

• Member Of

• Owns

• Reset Password

• Write DACL

• Write Owner