Hide Navigation Hide TOC HackTool - KrbRelay Execution (e96253b8-6b3b-4f90-9e59-3b24b99cf9b4) Detects the use of KrbRelay, a Kerberos relaying tool Cluster A Galaxy A Cluster B Galaxy B Level HackTool - KrbRelay Execution (e96253b8-6b3b-4f90-9e59-3b24b99cf9b4) Sigma-Rules Kerberoasting - T1558.003 (f2877f7f-9a4c-4251-879f-1224e3006bee) Attack Pattern 1 Kerberoasting - T1558.003 (f2877f7f-9a4c-4251-879f-1224e3006bee) Attack Pattern Steal or Forge Kerberos Tickets - T1558 (3fc01293-ef5e-41c6-86ce-61f10706b64a) Attack Pattern 2