All Detections

KrbRelayUp Tool Usage Detected

avatar
Shivam Malaviya@Shviam
updated Jul 4, 20255159

This detection identifies the use of KrbRelayUp, exploiting Kerberos relay attacks for local privilege escalation to SYSTEM.

Microsoft Sentinel (KQL)