Hunting the Hound of Hades: Kerberos Delegation Attacks, Detections and Defenses

When misconfigured, Kerberos delegation in an Active Directory environment can lead to complete domain compromise. From its initial inclusion in Windows 2000 Server to its current implementation in Windows Server 2025, the Kerberos protocol has undergone refinements and design updates to harden its...

By

Ben Boyle

December 23, 2024

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Undercover Operations_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

January 15, 2025

Undercover Operations: Scraping the Cybercrime Underground

Web scraping is a powerful and essential capability for cybercrime intelligence professionals.

Apurv Singh Gautam

Apurv Singh Gautam

Digital Forensics, Incident Response & Threat Hunting

January 13, 2025

How You Can Start Learning Malware Analysis

Lenny Zeltser shares a roadmap for getting into malware analysis, with pointers to 10 hours of free recorded content and additional references.

DFIR - Blog - Beyond Meh-trics_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

January 9, 2025

Beyond Meh-trics: Examining How CTI Programs Demonstrate Value Using Metrics

Cyber threat intelligence (CTI) teams are frequently asked to provide metrics for leadership to validate their contributions