Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juillet 28, 2023, 12:05:44

Titre: [SecList]Anomaly detection in certificate-based TGT requests
Posté par: igor51 le juillet 28, 2023, 12:05:44

Anomaly detection in certificate-based TGT requests

I identified several signs of attacks that use forged certificates inside the network and developed a Proof-of-Concept utility capable of finding artifacts in AD, as well as a number of detection logic rules that can be added to SIEM.
Source: Anomaly detection in certificate-based TGT requests (https://securelist.com/anomaly-detection-in-certificate-based-tgt-requests/110242/)