Threats Library
Reusable threat definitions (causes on the left side of bow-tie diagrams).
Add Threat
Tags:
clear tags
6 threats — page 1 of 1
| Name | Category | Tags | Description | |
|---|---|---|---|---|
| Steal or Forge Kerberos Tickets | Credential Access | Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets t… | Edit | |
| Steal or Forge Kerberos Tickets: AS-REP Roasting | Credential Access | Adversaries may reveal credentials of accounts that have disabled Kerberos preauthentication by Pass… | Edit | |
| Steal or Forge Kerberos Tickets: Ccache Files | Credential Access | Adversaries may attempt to steal Kerberos tickets stored in credential cache files (or ccache). Thes… | Edit | |
| Steal or Forge Kerberos Tickets: Golden Ticket | Credential Access | Adversaries who have the KRBTGT account password hash may forge Kerberos ticket-granting tickets (TG… | Edit | |
| Steal or Forge Kerberos Tickets: Kerberoasting | Credential Access | Adversaries may abuse a valid Kerberos ticket-granting ticket (TGT) or sniff network traffic to obta… | Edit | |
| Steal or Forge Kerberos Tickets: Silver Ticket | Credential Access | Adversaries who have the password hash of a target service account (e.g. SharePoint, MSSQL) may forg… | Edit |