krbtgt

Active Directory

Golden Ticket Attacks: Abusing krbtgt for Domain Persistence

How attackers forge Kerberos TGTs with the krbtgt hash to gain persistent domain dominance, and how blue teams detect and defend.