home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-golden-ticket-forgery-skill-md
quick start
Installation and usage
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
설치
$ install --globalskills.sh
사용법
설치 후 터미널에서 다음 명령을 실행하여 이 스킬을 사용할 수 있습니다:
skills use detecting-golden-ticket-forgery