Search

68888 – Microsoft Defender for Identity: New Detection – Golden ticket using AES encryption (archived)

cloudscout.one Icon

check before: 2021-12-01

Product:

Azure Advanced Threat Protection, Defender, Defender for Identity, Microsoft Defender for Identity

Platform:

Online, Web, World tenant

Status:

Cancelled

Change type:

New feature, Admin impact

Links:

Details:

This roadmap item has been cancelled and may be revisited in the future. An alert already exists to detect instances where an attacker downgrades the encryption level of the ticket-granting ticket (TGT) field, but this new alert introduces detection capabilities for when an attacker uses the KRBTGT AES hash to generate the ticket. This alert will find cases where the AES TGT is used for Kerberos TGT, where we don’t see a Kerberos authentication request with the previous service request.

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Release Phase:
General Availability

Created:
2020-11-24

updated:
2022-02-16

the free basic plan is required to see all details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.


Last updated 12 months ago

Share to MS Teams

Login to your account

Welcome Back, We Missed You!