githubEdit

MITIGATIONS

  1. Hard to detect because they are legit TGT tickets

  2. Mimikatz generates a golden ticket with a life-span of 10 years

  3. Set the attribute "Account is Sensitive and Cannot be Delegated" to prevent lateral movement with the generated ticket.

Last updated