Kerberos AS authentications
This query shows attempts to request Kerberos service ticket using the AS service, to monitor Kerberos AS authentications.
Microsoft Sentinel (KQL)

This query shows attempts to request Kerberos service ticket using the AS service, to monitor Kerberos AS authentications.

Already have an account?