Skip to main content

Glossary

Golden Ticket Attack

An attack against Microsoft Active Directory in which an attacker who has stolen the Kerberos Key Distribution Center service account's password hash forges a Ticket Granting Ticket, granting themselves unrestricted, persistent access to any resource in the domain. Because it forges a legitimate-looking ticket, it is very difficult to detect and typically requires resetting the KRBTGT account to remediate.

← All 285 glossary terms