detecting-pass-the-ticket-attacks
0
Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns in Splunk and Elastic SIEM
Install this skill
Run this command in your terminal. No account required — it auto-detects your AI tool and installs the skill file.
npx @skills-hub-ai/cli install cybersecurity-skills-detecting-pass-the-ticket-attacksOr download directly:
View all CLI commands →Setup by platform
Instructions
Security
Loading security scan...