home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-golden-ticket-forgery-skill-md
debuggingtools
detecting-golden-ticket-forgery
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
maintainer
mukul975
Mis à jour 4/6/2026
Étoiles
4240
Forks
464
quick start
Installation and usage
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
Installation
$ install --globalskills.sh
Utilisation
Après l'installation, vous pouvez utiliser ce skill en exécutant la commande suivante dans votre terminal :
skills use detecting-golden-ticket-forgery