by Jesper Kråkhede, Sweden
Posted in Methodology, Security Architecture, Technology on Oct 14th, 2023
The krbtgt account is the account whose password is used to sign every Kerberos ticket granting ticket in your domain. If an attacker gets its password hash, he can create his own tickets, golden tickets, for any user, with any rights, for as long as he likes. Changing the passwords of all admins doesn´t help. […]
Active Directory AI AI agents AI governance Automation Business Cloud security Compliance Cost Credential Theft Data protection Detection Device management Governance Identity Incident response Information classification Legacy Logging Methodology Microsoft Microsoft Defender Microsoft Digital Defense Report Microsoft Sentinel Organisation OT Patching PAW Personal Privileged access Ransomware Remote access Remote work Risk management Security Architecture Security strategy Service Providers SOC SPA Statistics Supply chain Threat intelligence VPN Vulnerabilities Zero Trust