← Security+ glossary

Golden ticket

A forged Kerberos TGT ticket created using the stolen hash of the krbtgt account, which gives the attacker practically unlimited access to the entire Active Directory domain. It is hard to detect, and remediation requires a double change of the krbtgt password and a thorough review of the domain.

All Security+ guides →