Threat Intelligence
Pass-the-Ticket Attacks: Risks and Protection for Small Businesses
Ticket-granting tickets remain valid until expiration, allowing attackers to move laterally without passwords or local admin rights on the compromised host.
kerberos security
Everything Sandbox Desk has reported about kerberos security: 3 stories, newest first. Part of our Threat Intelligence coverage.
Threat Intelligence
Golden Ticket Attack Prevention Checklist for Identity Security
Golden ticket attacks bypass standard password checks by forging Kerberos tickets with infinite lifetimes, rendering most endpoint defenses useless.
Threat Intelligence
Kerberoasting Mistakes That Expose Service Accounts
Service accounts with weak encryption settings allow attackers to request and crack tickets offline without triggering immediate detection alerts.