home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-golden-ticket-forgery-skill-md
debuggingtools

detecting-golden-ticket-forgery

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

mukul975
maintainer
mukul975
更新于 4/6/2026
星标
4240
分支
464
quick start

Installation and usage

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

安装
$ install --globalskills.sh
使用

安装后,您可以通过在终端运行以下命令来使用此技能:

skills use detecting-golden-ticket-forgery