Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM
mukul975▌
creator profile · 752 approved skills · page 5 of 76
mukul975 publishes 752 approved skills on explainx.ai. This page loads 10 skills at a time. Current page is led by detecting-pass-the-ticket-attacks.
total skills
752
showing 10 on this page
page installs
10
10 this week