I’ve Got a Golden Twinkle in My Eye

SANS PenTest HackFest 2022

Speakers: Andrew Schwartz, Practice Lead, TrustedSec & Charlie Clark, Security Researcher, Semperis

The Kerberos Ticket Granting Ticket (KRBTGT) account is one of the most important accounts in a Windows Active Directory (AD) domain. Once the KRBTGT account has been exposed to an attacker this can allow them to conduct the Golden Ticket (GT) attack, which can grant them persistence, unfettered access, and may allow for privilege escalation in AD. This talk will stress the importance of …

access account accounts active directory amp attack directory domain escalation exposed golden golden ticket grant hackfest important kerberos may pentest persistence practice privilege privilege escalation researcher sans security security researcher semperis speakers trustedsec windows