Kerberos - A Domains Achille's Heel
Tags
attack-pattern: Credentials - T1589.001 Dcsync - T1003.006 Domains - T1583.001 Domains - T1584.001 Golden Ticket - T1558.001 Ip Addresses - T1590.005 Kerberoasting - T1558.003 Local Account - T1087.001 Local Account - T1136.001 Powershell - T1059.001 Security Account Manager - T1003.002 Server - T1583.004 Server - T1584.004 Silver Ticket - T1558.002 Tool - T1588.002 Kerberoasting - T1208 New Service - T1050 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID 8851789b-0493-4fed-9bef-065b3c406096
Fingerprint f219ed5a2d602ce3
Analysis status DONE
Considered CTI value 2
Text language
Published June 2, 2021, noon
Added to db Nov. 6, 2023, 7:36 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline UNKNOWN
Title Kerberos - A Domains Achille's Heel
Detected Hints/Tags/Attributes 65/1/23
Source URLs
Redirection Url
Details Source https://www.optiv.com/insights/source-zero/blog/kerberos-domains-achilles-heel
URL Provider
Details Provider Source level domain
Details optiv.com www.optiv.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 346 ✔ Optiv Blog https://www.optiv.com/resources/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
www.saotn.org
Details Domain 1 
userentry.name
Details Domain 22 
getuserspns.py
Details Domain 11 
ticketer.py
Details Domain 3 
raisechild.py
Details Domain 4128 
github.com
Details Domain 72 
optiv.com
Details Email 65 
legal@optiv.com
Details File 1 
userentry.obj
Details File 20 
getuserspns.py
Details File 9 
ticketer.py
Details File 3 
raisechild.py
Details Github username 14 
secureauthcorp
Details Github username 29 
gentilkiwi
Details Github username 12 
byt3bl33d3r
Details md5 1 
3c0ca92a8fa19374d19bf887543a5e19
Details md5 1 
47d91aca4b29907d30251a0bfe9b189c
Details md5 1 
cf28a3d01502d7912dedc4500d5ac990
Details IPv4 16 
192.168.1.20
Details Url 1 
https://www.saotn.org/list-spns-used-active-directory
Details Url 7 
https://github.com/secureauthcorp/impacket
Details Url 14 
https://github.com/gentilkiwi/mimikatz
Details Url 2 
https://github.com/byt3bl33d3r/crackmapexec