Ravi Sir's Cyber Security Cards › Comparison Cards
Golden Ticket versus Silver Ticket – what do you say safely?
Golden Ticket versus Silver Ticket – what do you say safely? Kerberos is the login system in Windows Active Directory. It uses “tickets”. Golden Ticket : a forged master ticket. It needs the KRBTGT key (the domain’s master key). Silver Ticket : a forged ticket for one service only. Golden Ticket = a
Read card text
What this card says
What each one is
Kerberos is the login system in Windows Active Directory. It uses “tickets”.
Golden Ticket: a forged master ticket. It needs the KRBTGT key (the domain’s master key).
Silver Ticket: a forged ticket for one service only.
How serious
Golden Ticket = access to almost everything in the domain.
Silver Ticket = access to one service, like one file server.
Defence
Protect the most powerful accounts (Tier 0) and the KRBTGT key.
Watch for odd ticket lifetimes and unusual service ticket requests (Event ID 4769).
What to say
Talk about defence only. No forging steps.
After a suspected breach, reset the keys as Microsoft advises.
Learn more in the lesson: 47.5 Identity Attacks Awareness (Kerberos / PTH – defensive talking points only)