home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-golden-ticket-forgery-skill-md

debuggingtools

detecting-golden-ticket-forgery

Name: detecting-golden-ticket-forgery
Author: mukul975

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

查看源碼 debugging

maintainer

mukul975

更新於 4/6/2026

星標

4240

分支

464

quick start

Installation and usage

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM

安裝

$ install --globalskills.sh

使用

安裝後，您可以通過在終端運行以下命令來使用此技能：

skills use detecting-golden-ticket-forgery