[Intel]: https://blog.talosintelligence.com/2018/12/PortcullisActiveDirectory.html

### Area

Offensive techniques

### Parent threat

Credential Access

### Finding

https://blog.talosintelligence.com/2018/12/PortcullisActiveDirectory.html

### Industry reference

attack:T1558:Steal or Forge Kerberos Tickets

### Malware reference

_No response_

### Actor reference

_No response_

### Component

_No response_

### Scenario

_No response_


