All Detections

HackTool - KrbRelayUp Execution

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202504

Detects KrbRelayUp used to perform a universal no-fix local privilege escalation in Windows domain environments where LDAP signing is not enforced

Sigma