Glossary
Golden Ticket Attack
An attack against Microsoft Active Directory in which an attacker who has stolen the Kerberos Key Distribution Center service account's password hash forges a Ticket Granting Ticket, granting themselves unrestricted, persistent access to any resource in the domain. Because it forges a legitimate-looking ticket, it is very difficult to detect and typically requires resetting the KRBTGT account to remediate.