🛡️ Security

Tier-0 Asset

A system whose compromise gives an attacker control over the identities or infrastructure of every other tier, such as domain controllers, identity providers and, by the same test, a SIEM holding stored credentials. Tier-0 assets get the strictest administrative access rules and the fastest patch window.

📚 Deep Dive

Learn Article

Why Your SIEM Is a Tier-0 Asset: What an Attacker Gets From One Search Head

A compromised search head hands over every stored credential, every detection rule and the power to erase the evidence. Why the SIEM belongs on the domain-controller patch clock, and what changes.

intermediate 6 min read

Back to Glossary