{
  "technique_id": "T1558",
  "name": "Steal or Forge Kerberos Tickets",
  "tactics": [
    "Credential Access"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Windows"
  ],
  "summary": "Adversaries may attempt to subvert Kerberos authentication by stealing or forging Kerberos tickets to enable [Pass the Ticket](https://attack.mitre.org/techniques/T1550/003). Kerberos is an authentication protocol widely used in modern Windows domain environments. In Kerberos environments, referred to as “realms”, there are three basic participants: client, service, and Key Distribution Center (KDC)...",
  "generated_by": "SOC Response Atlas by Basyrix"
}