All Detections

HackTool - RemoteKrbRelay Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025014

Detects the use of RemoteKrbRelay, a Kerberos relaying tool via CommandLine flags and PE metadata.

Sigma