MS ATA and golden ticket

  • 131 Views
  • Last Post 02 June 2017
aaugagneur posted this 01 June 2017

Hi guys,
Is some one played a bit with ATA?
I'm testing it right now. I am able to raise most of the alerts excepted the golden tickets. It is strange because I don't see any example of golden ticket detection over Internet. Even from the MS ATA PlayBook, they just talk about a few of it but without any demo.
Alexandre Augagneur

Order By: Standard | Newest | Votes
pradeeprawat85 posted this 02 June 2017

Is this a test environment you are simulating attacks on? How frequently the users and computers authenticate?What I heard from MS regarding golden tickets attack is that ATA needs to see the user and machine can support AES encryption and ATA does this by watching authentication for 5 days.


show

aaugagneur posted this 02 June 2017

Interesting... yes it is a test environment.
But I have installed ATA for a while now. Maybe 3 months.
Le ven. 2 juin 2017 10:08, Pradeep Rawat <pradeeprawat85@xxxxxxxxxxxxxxxx> a écrit :
Is this a test environment you are simulating attacks on? How frequently the users and computers authenticate?What I heard from MS regarding golden tickets attack is that ATA needs to see the user and machine can support AES encryption and ATA does this by watching authentication for 5 days.


show

Close