---
id: 5865
title: "How to Defend Against Golden Ticket Attacks: AD Security 101"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/how-to-defend-against-golden-ticket-attacks/"
published_at: "2024-01-04T22:43:23Z"
tags: ["active-directory", "privilege-escalation", "kerberos", "defense", "mimikatz", "golden-ticket", "krbtgt"]
phying_url: "https://phying.com/item/5865"
lang: en
---

# How to Defend Against Golden Ticket Attacks: AD Security 101

## Summary

Golden Ticket attacks forge Kerberos TGTs using the KRBTGT account hash to gain unrestricted domain access. Explains Kerberos and KRBTGT basics, how Mimikatz is used, and defensive tactics.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-01-04T22:43:23Z
- **Original:** https://www.semperis.com/blog/how-to-defend-against-golden-ticket-attacks/
- **Phying News:** https://phying.com/item/5865