detecting-golden-ticket-forgery

【效率与协作】Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

独立 GitHub 快照 · 自动分类 · 以原作者文档为准