sk Skill · meltedinhex
hunting-active-directory-attacks
Hunts for Active Directory credential and replication attacks — DCSync, Golden/Silver Ticket, and DCShadow — by analyzing directory-service-access (4662), Kerberos TGS (4769), and logon (4624) events for replication abuse and forged-ticket anomalies. Activates for requests to hunt DCSync, detect golden/silver tickets, or find Active Directory replication abuse.
Open on skills.sh ↗read 2026-09-15
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
Pythoncredential-accessgolden-ticketbashdcsyncactive-directorythreat-hunting
- Host repository
- meltedinhex/analyst-ai-pack
- Version
- 1.0.0
- Licence
- Apache-2.0
- Host stars
- 22
- Host language
- Python