Uncommon Outbound Kerberos Connection - Security

SigmaHQ Detections@sigmaHQ

•updated May 20, 2025•0•0•0

Detects uncommon outbound network activity via Kerberos default port indicating possible lateral movement or first stage PrivEsc via delegation.