Kerberos
A network authentication protocol that performs identity verification through a ticket-based mechanism. It is widely used in Windows Active Directory domain environments, where its delegation feature allows a service to access back-end resources on behalf of a user.
Timeline (last 90 days)
Kerberos delegation is mainly divided into three forms: unconstrained delegation, constrained delegation, and resource-based constrained delegation (RBCD).
Kerberos service ticket requests generate Event ID 4769 logs.
Identity infrastructure is becoming a key target for attackers, and research into abuse of Kerberos edge features remains active.
Kerberos was developed by MIT, employs a ticket mechanism with mutual authentication, and is the default authentication method in Active Directory environments.
All Facts (4)
Kerberos delegation is mainly divided into three forms: unconstrained delegation, constrained delegation, and resource-based constrained delegation (RBCD).
50%UnverifiedKerberos service ticket requests generate Event ID 4769 logs.
50%UnverifiedIdentity infrastructure is becoming a key target for attackers, and research into abuse of Kerberos edge features remains active.
50%UnverifiedKerberos was developed by MIT, employs a ticket mechanism with mutual authentication, and is the default authentication method in Active Directory environments.
50%