GPTsApp SkillsCodex Reset
Menu
← Back to results

skill collection · Study the method

detecting-pass-the-ticket-attacks

Detect Kerberos Pass-the-Ticket (PtT) attacks by analyzing Windows Event IDs 4768, 4769, and 4771 for anomalous ticket usage patterns, with detection queries

SKILL.md metadata excerpt. This is the source’s description, not an instruction to this site.

mukul975/anthropic-cybersecurity-skillsskills/detecting-pass-the-ticket-attacks/SKILL.md

Before you use it

Input
Not independently summarized. Check the source’s scope and examples.
Expected output
Not independently summarized; do not assume a ready-to-use artifact.
Prerequisites
Review the source instructions, scripts, accounts and tools in your intended environment.

Installation guidance is not individually established for this example. Read the source and confirm its requirements.

Publisher documentation, static file observations and environment tests are different kinds of evidence. Runtime behavior has not been observed.

Study the method

Start with the task scope and instructions, then inspect supporting files and examples. Compare the workflow with your own inputs, constraints and intended result.

4 files in the observed scope; 1 in scripts/, 1 in references/, 0 in assets/.

The supporting file list has not been read for this source. Open the source directory to inspect it.

Zero files in scripts/ does not mean no execution, network access or file writes. Markdown and other folders may describe or contain executable behavior.

Source version and requirements

Observed
2026-09-12T11:41:10.750Z
Source commit
54a798831d2266a3ca61ce68a7acb80b81160d57
Content SHA-256
d1e2a25878902e2251710791df2c1cf4e2a7ab3179e37e3a3f7e73af68dc28a4
License
Apache-2.0
Author attribution
Repository owner: mukul975. Individual authorship is not independently established.
Read applicable source license ↗

This page describes a pinned source snapshot, not the latest repository state. Changes after this commit have not been reconciled here. A repository license does not necessarily cover external models, datasets or services.

Open current repository ↗
Reference note and manual copy