Host constrained delegation settings changed for potential abuse (Rubeus) - Kerberos only
Detects scenarios where an attacker modifies host delegation settings for privilege escalation.
Sigma

Detects scenarios where an attacker modifies host delegation settings for privilege escalation.

Already have an account?