hydden.docs

#

On the Classification Rules page, tenant owners can create and edit Account Classifications and Classification Rules.

The page provides two configuration workflows. One to setup Classifications and the other to define Classification Rules.

Add Classification

Hydden provides the following default classifications:

• Admin Account
• Custom Account
• CVE-based classifications:
  • CVE-2024-37085
  • CVE-2024-42793
• Known Bad Account
• Privileged Account
• Service Account

Use the + Add Classification button to add your own classifications.

Add Classification Rules

By default, Hydden provides the following Classification rules:

• Accounts by Display Name
• Accounts by Email
• Accounts by Name
• Accounts by UPN
• Member of Privileged Group
• Service Account by Path/OU
• Service Account by Type
• Active Directory Accounts with a name of KRTBGT
• Active Directory Accounts with a name of KRTBGT (CVE)
• Privileged Account
• VMware vSphere Admin Accounts
• VMware vSphere Admin Accounts (CVE)

Use the + Add Classification Rule button to add your own classification rules. Use the Edit button to edit existing rules. Use the Rule Matches button to view data that is matching the specific rule.

1. Give your rule a Name.
2. Optionally from the Data Source drop-down, select a data source this rule should apply to.
3. From the Query field, select which query to use for this rule.
4. From the Operator field, select either Contains, Starts with, or Ends with.
5. In the Value field, enter which value, prefix, suffix, or term to match.
6. From the Classification field, select the classification for this rule.
7. Click Add.

The Classification Rules come with an out of the box report in the Search Library on the Identity & Account tile:

• Account Classifications

Account Classification Report

The Account Classification Report in the Search Library shows the following columns by default:

• Classification
• Classification Rule
• Platform
• Data Source
• Domain
• Provider
• Type
• Account Name
• Mapped to
• Display Name
• Email
• UPN
• MFA
• Status

The Path column, which can be added via the Columns button, provides visibility into Path/OU value details required to set up a custom Path/OU classification.