Kerberos Attack Hunt Suite

Kerberos attacks are the primary credential-based lateral movement technique in Indian enterprise Windows environments. This suite covers four attack types — each with SPL and KQL hunt queries, the required audit settings, and what the data looks like when the attack is happening.