Labels

Learn how to use labels to categorize and manage objects within Privilege Zones for better organization.

Labels let you tag groups of objects for easier searching and filtering. Use labels to mark objects with common characteristics (e.g., “PCI”, “Owned”, “Production”).

You can filter views and queries based on labels. For example, label PCI-scoped systems to quickly identify attack paths from non-PCI to PCI environments.

Unlike zones, BloodHound does not use labels in risk analysis—they’re designed to help you organize and query your data.

The Labels tab offers two views:

Summary View

The Summary View shows label names, selector counts, and member count.

Create a label

Creating a label involves configuring the label details and defining a selector.

1. Open the Privilege Zones page

   In the left menu, click Privilege Zones > Labels > Create Label.

2. Configure initial label details

   Enter all relevant information about the label:

   Field	Required?	Description
   Name	Yes	A unique name for the label (e.g., PCI)
   Description	No	A brief description of the label’s purpose and scope (e.g., PCI assets)

   
3. Define a selector

   Click Define Selector to save your new label and continue on to define the objects to include in the label.

   See Selectors for more detailed information about defining selectors and using certification to control expansion behavior before you create a zone or label. The content in this section provides a high-level overview only.

   When defining a selector during the label creation process, provide the following information:

   Field	Required?	Description
   Name	Yes	A unique name for the selector (e.g., PCI)
   Description	No	A brief description of the selector’s purpose and scope (e.g., PCI assets)
   Selector Type	Yes	The type of selector to use (e.g., Object ID or Cypher)

   
4. Complete label creation

   Click Save to finish creating the label.

Edit or delete a label

To edit or delete an existing label, follow these steps:

1. Select a label

   Navigate to the Privilege Zones page, select the label you want to edit or delete, and click Edit.

2. Edit or delete a label

   Choose one of the following actions:

   Edit a label

   To edit the label:

   1. Modify the label’s name and description.

   2. Click Save Edits to apply your changes.