Agent Skills: detecting-pass-the-ticket-attacks

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM

UncategorizedID: plurigrid/asi/detecting-pass-the-ticket-attacks

Author

plurigrid

https://github.com/plurigrid View all skills

Repository

plurigrid/asi

plurigridLicense: MIT

165

Install this agent skill to your local

pnpm dlx add-skill https://github.com/plurigrid/asi/detecting-pass-the-ticket-attacks

Skill Files

Browse the full folder contents for detecting-pass-the-ticket-attacks.

Download Skill

Loading file tree…

Select a file to preview its contents.