Suspicious Kerberos proxiable/S4U2self ticket (CVE-2021-42278/42287)
Detects scenarios where an attacker attempts to request a proxiable ticket. This action may trigger while attempting to identify a vulnerable target or using some offsensive Kerberos tools like Kerbrute, Impacket...
Sigma
