home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-golden-ticket-forgery-skill-md
quick start
Installation and usage
Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 for RC4 encryption downgrades (0x17), abnormal ticket lifetimes, and krbtgt account anomalies in Splunk and Elastic SIEM
安裝
$ install --globalskills.sh
使用
安裝後，您可以透過在終端機執行以下指令來使用此技能：
skills use detecting-golden-ticket-forgery