Attack Relations

Attack relations are unidirectional from a Source node to a Target node. Since relations are transitive, attackers can chain them together to create an "attack path":

Tenable Identity Exposure has the following attack relations:

• Add Key Credential

• Add Member

• Allowed To Act

• Allowed To Delegate

• Belongs To GPO

• DCSync

• Grant Allowed To Act

• Has SID History

• Implicit Takeover

• Inherit GPO

• Linked GPO

• Member Of

• Owns

• Reset Password

• RODC Manage

• Write DACL

• Write Owner