Common Information
| Type | Value |
|---|---|
| Value |
AZT201.2 - Service Principal |
| Category | Atrm |
| Type | Atrm |
| Misp Type | Cluster |
| Description | By obtaining a valid secret or certificate, an adversary may login to AzureAD via command line. |
| Details | Published | Attributes | CTI | Title | ||
|---|---|---|---|---|---|---|
| Details | Website | 2018-07-16 | 0 | Cracking Service Account Passwords with Kerberoasting | ||
| Details | Website | 2018-06-04 | 10 | SPN Discovery | ||
| Details | Website | 2018-02-24 | 29 | HackTheBox - Mantis Writeup | ||
| Details | Website | 2018-02-16 | 7 | Azure Automation accounts and shared resources | ||
| Details | Website | 2017-11-09 | 6 | Use Azure Managed Service Identity (MSI) to store passwords in your code securely | ||
| Details | Website | 2017-11-08 | 9 | Kerberos AD Attacks - More Roasting with AS-REP | ||
| Details | Website | 2017-10-30 | 15 | A Guide to Attacking Domain Trusts | ||
| Details | Website | 2017-03-13 | 0 | Performing Domain Reconnaissance Using PowerShell | ||
| Details | Website | 2016-08-01 | 14 | Blindly Discover SQL Server Instances with PowerUpSQL | ||
| Details | Website | 2016-06-23 | 0 | Service Accounts – Weakest Link in the Chain? | ||
| Details | Website | 2015-12-31 | 2 | Cracking Kerberos TGS Tickets Using Kerberoast – Exploiting Kerberos to Compromise the Active Directory Domain | ||
| Details | Website | 2015-12-13 | 3 | Protecting Windows Networks – Kerberos Attacks | ||
| Details | Website | 2015-09-20 | 35 | Mimikatz | ||
| Details | Website | 2015-07-27 | 20 | Auto-Dumping Domain Credentials using SPNs, PowerShell Remoting, and Mimikatz | ||
| Details | Website | 2015-05-03 | 4 | Detecting Forged Kerberos Ticket (Golden Ticket & Silver Ticket) Use in Active Directory | ||
| Details | Website | 2015-01-01 | 0 | Credential cache — MIT Kerberos Documentation | ||
| Details | Website | 2014-11-22 | 10 | Mimikatz and Active Directory Kerberos Attacks | ||
| Details | Website | 2014-07-15 | 43 | Logging IAM and AWS STS API calls with AWS CloudTrail - AWS Identity and Access Management | ||
| Details | Website | 2014-05-28 | 17 | Locate and Attack Domain SQL Servers without Scanning | ||
| Details | Website | 2014-03-26 | 65 | New Metasploit 4.9 Helps Evade Anti-Virus Solutions, Test Network Segmentation, and Increase Productivity for Penetration Testers | Rapid7 Blog | ||
| Details | Website | 2014-01-06 | 6 | Faster Domain Escalation using LDAP | ||
| Details | Website | 2012-08-14 | 19 | Service Principal Names (SPN): SetSPN Syntax - TechNet Articles - United States (English) - TechNet Wiki |