Agent Skills: detecting-golden-ticket-forgery

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

UncategorizedID: autohandai/community-skills/detecting-golden-ticket-forgery

Author

autohandai

https://github.com/autohandai View all skills

Repository

autohandai/community-skills

autohandaiLicense: Apache-2.0

103

Install this agent skill to your local

pnpm dlx add-skill https://github.com/autohandai/community-skills/detecting-golden-ticket-forgery

Skill Files

Browse the full folder contents for detecting-golden-ticket-forgery.

Download Skill

Loading file tree…

Select a file to preview its contents.