All Detections

HackTool - KrbRelayUp Execution

avatar
SigmaHQ Detections@sigmaHQ
updated Apr 28, 2026000

Detects KrbRelayUp used to perform a universal no-fix local privilege escalation in Windows domain environments where LDAP signing is not enforced

Sigma