Kerberos AS authentications

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query shows attempts to request Kerberos service ticket using the AS service, to monitor Kerberos AS authentications.

Attribute Value
Type Hunting Query
Solution Standalone Content
ID 8abe561f-eecd-45cb-a0a3-152189d2c064
Tactics Credential Access
Required Connectors MicrosoftThreatProtection
Source [View on GitHub](https://github.com/Azure/Azure-Sentinel/blob/master/Hunting Queries/Microsoft%20365%20Defender/Credential%20Access/Attempts%20to%20request%20Kerberos%20service%20ticket%20using%20the%20AS%20service.yaml)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries