Hide Navigation Hide TOC HackTool - KrbRelay Execution (e96253b8-6b3b-4f90-9e59-3b24b99cf9b4) Detects the use of KrbRelay, a Kerberos relaying tool Cluster A Galaxy A Cluster B Galaxy B Level Kerberoasting - T1558.003 (f2877f7f-9a4c-4251-879f-1224e3006bee) Attack Pattern HackTool - KrbRelay Execution (e96253b8-6b3b-4f90-9e59-3b24b99cf9b4) Sigma-Rules 1 Steal or Forge Kerberos Tickets - T1558 (3fc01293-ef5e-41c6-86ce-61f10706b64a) Attack Pattern Kerberoasting - T1558.003 (f2877f7f-9a4c-4251-879f-1224e3006bee) Attack Pattern 2