KrbRelayUp Tool Usage Detected

This detection identifies the use of KrbRelayUp, exploiting Kerberos relay attacks for local privilege escalation to SYSTEM.

Microsoft Sentinel (KQL)