Replay Attack Detected

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects possible Kerberos Replay Attack on the domain controllers when "KRB_AP_ERR_REPEAT" Kerberos response is sent to the client