Kerberos & KRBTGT: Active Directory’s Domain Kerberos Service Account
Tags
attack-pattern: Data Domain Account - T1087.002 Domain Account - T1136.002 Domains - T1583.001 Domains - T1584.001 Golden Ticket - T1558.001 Pass The Hash - T1550.002 Pass The Ticket - T1550.003 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Pass The Hash - T1075 Pass The Ticket - T1097 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID b4a10e9e-43b9-458d-ae3b-3bbee058fd72
Fingerprint e2104f1102e22645
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 10, 2014, 3:17 p.m.
Added to db Sept. 26, 2022, 9:31 a.m.
Last updated Oct. 21, 2024, 11:18 a.m.
Headline Kerberos & KRBTGT: Active Directory’s Domain Kerberos Service Account
Title Kerberos & KRBTGT: Active Directory’s Domain Kerberos Service Account
Detected Hints/Tags/Attributes 49/1/9
Source URLs
Redirection Url
Details Source https://adsecurity.org/?p=483
URL Provider
Details Provider Source level domain
Details adsecurity.org adsecurity.org
Attributes
Details Type #Events CTI Value
Details Domain 3 
lab.adsecurity.org
Details Domain 2 
rd.adsecurity.org
Details Domain 30 
adsecurity.org
Details Domain 6 
system.web.security
Details Email 1 
user@adsecurity.org
Details File 1 
notes-on-kerberos-kvno-in-windows-rodc-environment.aspx
Details File 1 
problems-with-introducing-a-new-windows-server-2008-dc-into-a-windows-2003-forest.aspx
Details Url 1 
http://blogs.msdn.com/b/openspecification/archive/2011/05/11/notes-on-kerberos-kvno-in-windows-rodc-environment.aspx
Details Url 1 
http://blogs.technet.com/b/instan/archive/2009/07/30/problems-with-introducing-a-new-windows-server-2008-dc-into-a-windows-2003-forest.aspx