Detecting Forged Kerberos Ticket (Golden Ticket & Silver Ticket) Use in Active Directory
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Exploits - T1587.004 Exploits - T1588.005 Golden Ticket - T1558.001 Impersonation - T1656 Ntds - T1003.003 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Silver Ticket - T1558.002 Tool - T1588.002 Powershell - T1086 Loss Of Control
Show in Graph
Common Information
Type Value
UUID 9259009f-e4b3-4aee-a017-575e0671c7e9
Fingerprint a31845590c41e4c3
Analysis status DONE
Considered CTI value 0
Text language
Published May 3, 2015, 3:17 p.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Sept. 4, 2024, 4:08 p.m.
Headline Detecting Forged Kerberos Ticket (Golden Ticket & Silver Ticket) Use in Active Directory
Title Detecting Forged Kerberos Ticket (Golden Ticket & Silver Ticket) Use in Active Directory
Detected Hints/Tags/Attributes 46/2/4
Source URLs
Redirection Url
Details Source https://adsecurity.org/?p=1515
URL Provider
Details Provider Source level domain
Details adsecurity.org adsecurity.org
Attributes
Details Type #Events CTI Value
Details Domain 2 
adsmswin2k8r2.lab.adsecurity.org
Details Domain 1 
eo.oe.kiwi
Details Domain 3 
lab.adsecurity.org
Details IPv4 4 
3.3.5.7