Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

April 2021

Ensure 'Audit Kerberos Service Ticket Operations' Is Set To 'Success And Failure'

Auditing Kerberos service ticket operations is important for detecting hackers trying to use Kerberos as an attack vector. The default value of this configuration is to audit only successful events. This may eventually result in missing an attack or not having enough information to investigate it.