Kerberos Golden Ticket Attack Detection

This detection identifies potential Golden Ticket attacks leveraging forged Kerberos TGTs for domain administrator access through suspicious logon patterns.

Microsoft Sentinel (KQL)